trilbymedia CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH trilbymedia CVE published 2026-10-12

CVE-2026-109318

CVE-2026-109318 is a high-severity command injection vulnerability in Grav Git Sync plugin versions 1.0.2 through 3.4.12. Authenticated content editors can inject OS commands by manipulating profile fields, which are then executed via git commit --author as the web-server account. This vulnerability allows for potential lateral movement within the network, elevation of privileges for authenticated content [truncated]