Login Request a demo
LA
Product
laradashboard
by laradashboard · last CVE Oct 3, 2026
15
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 2High 6Medium 5Low 2
Severity
All severities15Critical2High6Medium5Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add laradashboard to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-86184
9.8
1%
Sep 5
Lara Dashboard before 1.3.0 Missing Authentication in screenshot-login Route
Affected: before 1.3.0
CVE-2025-66509
9.8
0%
Dec 4
LaraDashboard: 1-Click Pre-Auth RCE via Host Header + Module Installation Chain
Affected: <= 2.3.0
CVE-2026-105126
7.2
0%
Oct 3
LaraDashboard before 1.4.8 Privilege Escalation via Superadmin Role Tampering
Affected: before 1.4.8
CVE-2026-90932
7.2
1%
Sep 14
LaraDashboard 0.9.2 through 1.2.2 Path Traversal RCE
Affected: 0.9.2 through 1.4.2
CVE-2026-86438
7.2
1%
Sep 7
Lara Dashboard before 1.3.2 Missing Authorization in Marketplace Module Install Action
Affected: before 1.3.2
CVE-2026-86437
7.2
1%
Sep 7
Lara Dashboard before 1.3.2 Incorrect Authorization in Core-Upgrade Archive Upload
Affected: before 1.3.2
CVE-2026-90933
7.1
0%
Sep 14
laradashboard through 1.2.2 Missing Authorization via License API
Affected: through 1.2.2
CVE-2026-87821
7.1
0%
Sep 9
Lara Dashboard 0.9.2 through 1.3.1 Server-Side Request Forgery in Builder Markdown Fetch
Affected: 0.9.2 before 1.3.2
CVE-2026-105129
6.5
0%
Oct 3
LaraDashboard before 1.4.8 Incorrect Authorization Exposes Secrets via Settings API
Affected: before 1.4.8
CVE-2026-105128
5.4
0%
Oct 3
LaraDashboard before 1.4.8 Open Redirect via Email Template Builder redirect_url
Affected: before 1.4.8
CVE-2026-90931
5.4
0%
Sep 14
LaraDashboard 0.9.0 through 1.2.2 Stored XSS via SVG Upload
Affected: 0.9.0 through 1.4.2
CVE-2026-86436
5.4
1%
Sep 7
Lara Dashboard before 1.3.2 Missing Authorization in Post-Builder Media Upload Endpoints
Affected: before 1.3.2
CVE-2026-105127
5.3
1%
Oct 3
LaraDashboard 1.4.2 before 1.4.8 Resource Exhaustion via Password Recovery Endpoints
Affected: 1.4.2 before 1.4.8
CVE-2026-105130
3.7
0%
Oct 3
LaraDashboard 1.4.0 before 1.4.8 Race Condition Bypasses Per-IP Registration Limit
Affected: 1.4.0 before 1.4.8
CVE-2026-105125
3.7
0%
Oct 3
LaraDashboard before 1.4.8 Path Traversal via /api/translations/{lang} Endpoint
Affected: before 1.4.8
Showing 15