THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-85602 (MEDIUM 5.3) — The Grav Form plugin (getgrav/grav-plugin-form) versions 8.0.6 through 9.1.19 select the reCAPTCHA version to validate based solely on which response field key is present in the submitted payload. On a site configured for reCAPTCHA v3, an anonymous attacker can place their v3 tok

[NVD] CVE-2026-85602 (MEDIUM 5.3) — The Grav Form plugin (getgrav/grav-plugin-form) versions 8.0.6 through 9.1.19 select the reCAPTCHA version to validate based solely on which response field key is present in the submitted payload. On a site configured for reCAPTCHA v3, an anonymous attacker can place their v3 tok

mednvdPublished 2026-09-04

CVE-2026-85602 CVSS: 5.3 MEDIUM Published: 2026-09-04T12:17:23.903

The Grav Form plugin (getgrav/grav-plugin-form) versions 8.0.6 through 9.1.19 select the reCAPTCHA version to validate based solely on which response field key is present in the submitted payload. On a site configured for reCAPTCHA v3, an anonymous attacker can place their v3 token under the v2 field name (g-recaptcha-response ins

Indicators of compromise

CVE-2026-85602cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-85602