Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N L N L L L 2.1 .0020 9.7 —
AFFECTED Product Versions Fixed Grit 0.1 – —
TIMELINE Jun 14 EXPLOIT PUBLISHED — CVE-2026-12188 (Grit42 Grit). Public exploit reference added. Jun 14 Reserved by VulDB Jun 14 Published (CNA: VulDB) Aug 3 RESCORED — CVE-2026-12188 (Grit42 Grit). CVSS 5.3 → 2.1 (NVD).
A vulnerability was detected in Grit42 Grit up to 0.11.0. Affected by this issue is some unknown functionality of the file modules/core/backend/app/controllers/concerns/grit/core/grit_entity_controller.rb of the component GritEntityController. Performing a manipulation results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
| Date | Event | Detail |
|---|---|---|
| June 14, 2026 | EXPLOIT PUBLISHED | EXPLOIT PUBLISHED — CVE-2026-12188 (Grit42 Grit). Public exploit reference added. |
| June 14, 2026 | Reserved | Reserved by VulDB |
| June 14, 2026 | Published | Published (CNA: VulDB) |
| August 3, 2026 | RESCORED | RESCORED — CVE-2026-12188 (Grit42 Grit). CVSS 5.3 → 2.1 (NVD). |
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|---|---|---|---|
| Grit42 | Grit | — | 0.1 | — |
Authoritative record: CVE-2026-12188 at cve.org
Vendors: grit42
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-12188 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.