AI description
CVE-2025-50286 describes a Remote Code Execution (RCE) vulnerability found in Grav CMS version 1.7.48. This flaw enables an authenticated administrator to upload a malicious plugin through the `/admin/tools/direct-install` interface. Upon successful upload, the system automatically extracts and loads the malicious plugin. This process allows for the execution of arbitrary PHP code and can grant an attacker reverse shell access to the affected system.
- Description
- A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated admin to upload a malicious plugin via the /admin/tools/direct-install interface. Once uploaded, the plugin is automatically extracted and loaded, allowing arbitrary PHP code execution and reverse shell access.
- Source
- cve@mitre.org
- NVD status
- Analyzed
- Products
- grav
CVSS 3.1
- Type
- Secondary
- Base score
- 8.1
- Impact score
- 5.9
- Exploitability score
- 2.2
- Vector string
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CWE-434
- Hype score
- Not currently trending
Metasploit Framework is here with 5 new modules! Exploits for FreeScout (CVE-2026-28289) and Grav CMS (CVE-2025-50286) RCEs, plus a generic HTTP command execution module and a new Windows persistence technique. We also have a slew of bug fixes and enhancements including SOCKS
@metasploit
3 Apr 2026
4401 Impressions
10 Retweets
35 Likes
7 Bookmarks
1 Reply
0 Quotes
📡 Strategic Insight: Metasploit Wrap-Up 04/03/2026 📅 Context: Rapid7 released Metasploit Framework 6.4.125 on 2026-04-03; adds five new modules including FreeScout unauthenticated RCE, Grav CMS plugin-upload RCE (CVE-2025-50286), generic multi/http/os_cmd_exec, Windows
@syedaquib77
3 Apr 2026
172 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-50286 Remote Code Execution in Grav CMS v1.7.48 via Authenticated Plugin Upload https://t.co/iRPCaajRz1
@VulmonFeeds
6 Aug 2025
14 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-50286 A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated admin to upload a malicious plugin via the /admin/tools/direct-install interfa… https://t.co/KNEcR3ldv9
@CVEnew
6 Aug 2025
259 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:getgrav:grav:1.7.48:*:*:*:*:*:*:*",
"matchCriteriaId": "59BC98C9-1252-4040-B12F-4288A18A2339",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]