CVE-2025-50286 is a Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48, allowing an authenticated administrator to upload and execute malicious PHP code via the /admin/tools/direct-install interface. This critical flaw, rated with a CVSS score of 8.1 HIGH and a FAUCET Risk Score of 83.0, enables full system compromise through reverse shell access. Despite a high attack complexity, its potential impact on confidentiality, integrity, and availability is severe. Public exploit code is available on ExploitDB, and a Metasploit module has been developed, confirming active community interest and a high probability of exploitation, as reflected by its EPSS score of 0.62338.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.7.48CPE matchmatch criteria | cpe:2.3:a:getgrav:grav:1.7.48:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.