LA
Vendor
laradashboard
16
CVEs
0
On KEV
6
New 30D
Products
LA9.8
laradashboard
laradashboard
15 CVEs0 on KEV6 new
LD9.8
Lara Dashboard
Laradashboard
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-105130 | LA laradashboard laradashboard | 3.7 | Oct 3 | LaraDashboard 1.4.0 before 1.4.8 Race Condition Bypasses Per-IP Registration Limit |
| CVE-2026-105129 | LA laradashboard laradashboard | 6.5 | Oct 3 | LaraDashboard before 1.4.8 Incorrect Authorization Exposes Secrets via Settings API |
| CVE-2026-105128 | LA laradashboard laradashboard | 5.4 | Oct 3 | LaraDashboard before 1.4.8 Open Redirect via Email Template Builder redirect_url |
| CVE-2026-105127 | LA laradashboard laradashboard | 5.3 | Oct 3 | LaraDashboard 1.4.2 before 1.4.8 Resource Exhaustion via Password Recovery Endpoints |
| CVE-2026-105126 | LA laradashboard laradashboard | 7.2 | Oct 3 | LaraDashboard before 1.4.8 Privilege Escalation via Superadmin Role Tampering |
| CVE-2026-105125 | LA laradashboard laradashboard | 3.7 | Oct 3 | LaraDashboard before 1.4.8 Path Traversal via /api/translations/{lang} Endpoint |
| CVE-2026-90933 | LA laradashboard laradashboard | 7.1 | Sep 14 | laradashboard through 1.2.2 Missing Authorization via License API |
| CVE-2026-90932 | LA laradashboard laradashboard | 7.2 | Sep 14 | LaraDashboard 0.9.2 through 1.2.2 Path Traversal RCE |
| CVE-2026-90931 | LA laradashboard laradashboard | 5.4 | Sep 14 | LaraDashboard 0.9.0 through 1.2.2 Stored XSS via SVG Upload |
| CVE-2026-87821 | LA laradashboard laradashboard | 7.1 | Sep 9 | Lara Dashboard 0.9.2 through 1.3.1 Server-Side Request Forgery in Builder Markdown Fetch |
| CVE-2026-86438 | LA laradashboard laradashboard | 7.2 | Sep 7 | Lara Dashboard before 1.3.2 Missing Authorization in Marketplace Module Install Action |
| CVE-2026-86437 | LA laradashboard laradashboard | 7.2 | Sep 7 | Lara Dashboard before 1.3.2 Incorrect Authorization in Core-Upgrade Archive Upload |
| CVE-2026-86436 | LA laradashboard laradashboard | 5.4 | Sep 7 | Lara Dashboard before 1.3.2 Missing Authorization in Post-Builder Media Upload Endpoints |
| CVE-2026-86184 | LA laradashboard laradashboard | 9.8 | Sep 5 | Lara Dashboard before 1.3.0 Missing Authentication in screenshot-login Route |
| CVE-2025-66509 | LA laradashboard laradashboard | 9.8 | Dec 4 | LaraDashboard: 1-Click Pre-Auth RCE via Host Header + Module Installation Chain |