Vulnerabilities in laradashboard

9 results

Vexday analysis

O Laradashboard apresenta baixo volume de risco com apenas 1 CVE registrado na base, sem incidentes de exploração ativa documentados no programa KEV do CISA. A vulnerabilidade identificada refere-se a controle de acesso inadequado (CWE-284), categoria que requer atenção em contextos sensíveis, mas o risco permanece contido pela ausência de atividade maliciosa confirmada e pela antiguidade da exposição.

CVE-2026-86438HIGHLara Dashboard before 1.3.2 Missing Authorization in Marketplace Module Install ActionEPSS 0.6%CVE-2026-86184CRITICALLara Dashboard before 1.3.0 Missing Authentication in screenshot-login RouteEPSS 0.6%CVE-2026-90932HIGHLaraDashboard 0.9.2 through 1.2.2 Path Traversal RCEEPSS 0.5%CVE-2025-66509HIGHLaraDashboard: 1-Click Pre-Auth RCE via Host Header + Module Installation ChainEPSS 0.4%CVE-2026-86437HIGHLara Dashboard before 1.3.2 Incorrect Authorization in Core-Upgrade Archive UploadEPSS 0.4%CVE-2026-87821HIGHLara Dashboard 0.9.2 through 1.3.1 Server-Side Request Forgery in Builder Markdown FetchEPSS 0.3%CVE-2026-86436MEDIUMLara Dashboard before 1.3.2 Missing Authorization in Post-Builder Media Upload EndpointsEPSS 0.3%CVE-2026-90933HIGHlaradashboard through 1.2.2 Missing Authorization via License APIEPSS 0.2%CVE-2026-90931MEDIUMLaraDashboard 0.9.0 through 1.2.2 Stored XSS via SVG UploadEPSS 0.2%