{"cvss":8.8,"datePublished":"","dateUpdated":"","description":"Grav: Unauthenticated Path Traversal & Arbitrary File Write in FormFlash component. | Affected: Getgrav / grav | CVSS: 8.8 (HIGH) | EPSS: 0.00521 | Used in malware: unknown | Not yet in CISA KEV: True","dueDate":"","exploited":true,"id":"CVE-2026-42608","kev_catalogs":["circl"],"knownRansomwareCampaignUse":"","product":"grav","severity":"HIGH","source":"circl_kev","title":"CVE-2026-42608","vendor":""}