[ Vendor · 6 CVEs ]
laradashboard
CVEs affecting laradashboard published in the last 30 days, plus any laradashboard CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-105126 | 4 Oct 2026 | CVSS 7.2 | laradashboardLaraDashboard before 1.4.8 contains an improper privilege management vulnerability that allows authenticated Admin users to escalate to Superadmin by… | |
| CVE-2026-105127 | 4 Oct 2026 | CVSS 5.3 | laradashboardLaraDashboard 1.4.2 before 1.4.8 applies advanced email validation to unauthenticated forgot-password and reset-password requests, triggering DNS… | |
| CVE-2026-105128 | 4 Oct 2026 | CVSS 5.4 | laradashboardLaraDashboard before 1.4.8 contains an open redirect vulnerability that allows remote attackers to redirect users by supplying an unvalidated… | |
| CVE-2026-105129 | 4 Oct 2026 | CVSS 6.5 | laradashboardLaraDashboard before 1.4.8 contains an incorrect authorization vulnerability that allows authenticated users with only settings.view permission to… | |
| CVE-2026-105130 | 4 Oct 2026 | CVSS 3.7 | laradashboardLaraDashboard from 1.4.0 before 1.4.8 contains a race condition vulnerability in RegisterController::register that allows unauthenticated attackers… | |
| CVE-2026-105125 | 4 Oct 2026 | CVSS 3.7 | laradashboardLaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON files by manipulating the… |