Skip to content

CVE record · 1 source

CVE-2026-109326

CVSS 7.5

Grav before 2.1.7 contains an information disclosure vulnerability because bundled nginx, lighttpd, IIS, and Caddy 2 configurations block .git only…

Vendor: Microsoft, F5
Product: IIS, NGINX, Squid / HAProxy / Varnish, Reverse proxies
CVSS: 7.5
EPSS: 0.003 (p29)
Exposure class: Web platform, Edge / VPN / firewall

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

28

CVE NVD 19d ago

Grav before 2.1.7 contains an information disclosure vulnerability because bundled nginx, lighttpd, IIS, and Caddy 2 configurations block .git only…

Grav before 2.1.7 contains an information disclosure vulnerability because bundled nginx, lighttpd, IIS, and Caddy 2 configurations block .git only at document root. Unauthenticated attackers can request nested repositories such…

CVSS 7.5 CVE-2026-109326 Microsoft F5