CVE-2026-42608Vulnerability
Reported by 1 independent source · first reported by The Hacker News · last reported
Last reported 26 days ago
What the reports say
1 report, newest first · the exact sentence from each-
⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats“…efaced by ShinyHunters through an unpatched Grav CMS flaw that's now assessed to be an unauthenticated path traversal vulnerability (CVE-2026-42608).”
Indicators reported together
named in the same reports- third-party[.]comin 1 report
- fbijobs[.]govin 1 report
Copy these 2 indicators · defanged
Also named with it: CVE-2026-63077, CVE-2026-28324, CVE-2026-28325, CVE-2026-87902, CVE-2026-95281, CVE-2026-95284, CVE-2026-95310, CVE-2026-95313, CVE-2026-95322, CVE-2026-95329, CVE-2026-95339, CVE-2026-95349, CVE-2026-95350, CVE-2026-95356, CVE-2026-95357, CVE-2026-93616, CVE-2026-94127, CVE-2026-87899
Thanks — we review every report.