Home › CVE Intelligence › CVE-2026-57852
CVSS 5.6 MEDIUM 🔴 ACTIVELY EXPLOITED Security Vulnerability

CVE-2026-57852: CVE-2026-57852 - Authentication Bypass via Null Short-Circuit in Grav CMS Scheduler Webho…

CVE ID : CVE-2026-57852 Published : July 20, 2026, 10:09 p.m. | 13minutes ago Description : Grav CMS scheduler-webhook plugin contains an authentication bypass vulnerability that allows unauthenticated remote attackers…

5.6CVSS Score
MEDIUMSeverity
NOCISA KEV
Security VulnerabilityImpact Type

📋 Vulnerability Details

CVE IDCVE-2026-57852
VendorUnknown Vendor
Affected ProductUnknown Product
Vulnerability TypeSecurity Vulnerability
CVSS Score5.6 (MEDIUM)
Actively Exploited✅ Yes
Patch StatusPending Vendor Disclosure
Reported ByCYBERDUDEBIVASH SENTINEL APEX Intelligence (via sentinel_apex)

🔬 Technical Analysis

CVE ID : CVE-2026-57852

Published : July 20, 2026, 10:09 p.m. | 13minutes ago

Description : Grav CMS scheduler-webhook plugin contains an authentication bypass vulnerability that allows unauthenticated remote attackers to trigger configured scheduled jobs by exploiting a sh... [Full analysis available on Pro]

⚡ DETECTION RULES AVAILABLE

Get CVE-2026-57852 Detection Pack

Sigma rules, YARA signatures, IOC table, and SIEM queries for Splunk, Elastic, Sentinel, and Chronicle — deployable in 5 minutes.

✓ Sigma Rules ✓ YARA Pack ✓ IOC Table ✓ SIEM Queries
🛡️ Get Detection Pack → 🔌 Access via API →

🔗 Related Intelligence