Vulnerabilidades en LaraDashboard
18 resultadosCVE-2026-86438HIGHLara Dashboard before 1.3.2 Missing Authorization in Marketplace Module Install ActionEPSS 1.1%CVE-2026-86184CRITICALLara Dashboard before 1.3.0 Missing Authentication in screenshot-login RouteEPSS 1.1%CVE-2026-90932HIGHLaraDashboard 0.9.2 through 1.2.2 Path Traversal RCEEPSS 0.8%CVE-2026-86437HIGHLara Dashboard before 1.3.2 Incorrect Authorization in Core-Upgrade Archive UploadEPSS 0.7%CVE-2026-86436MEDIUMLara Dashboard before 1.3.2 Missing Authorization in Post-Builder Media Upload EndpointsEPSS 0.5%CVE-2026-105127MEDIUMLaraDashboard 1.4.2 before 1.4.8 Resource Exhaustion via Password Recovery EndpointsEPSS 0.5%CVE-2026-105126HIGHLaraDashboard before 1.4.8 Privilege Escalation via Superadmin Role TamperingEPSS 0.5%CVE-2026-120487HIGHLaraDashboard before 1.4.5 Incorrect Authorization via SettingPolicy Core UpgradesEPSS 0.5%CVE-2026-87821HIGHLara Dashboard 0.9.2 through 1.3.1 Server-Side Request Forgery in Builder Markdown FetchEPSS 0.5%CVE-2025-66509HIGHLaraDashboard: 1-Click Pre-Auth RCE via Host Header + Module Installation ChainEPSS 0.4%CVE-2026-105128MEDIUMLaraDashboard before 1.4.8 Open Redirect via Email Template Builder redirect_urlEPSS 0.3%CVE-2026-105125MEDIUMLaraDashboard before 1.4.8 Path Traversal via /api/translations/{lang} EndpointEPSS 0.3%CVE-2026-105129HIGHLaraDashboard before 1.4.8 Incorrect Authorization Exposes Secrets via Settings APIEPSS 0.3%CVE-2026-90933HIGHlaradashboard through 1.2.2 Missing Authorization via License APIEPSS 0.3%CVE-2026-105130MEDIUMLaraDashboard 1.4.0 before 1.4.8 Race Condition Bypasses Per-IP Registration LimitEPSS 0.3%CVE-2026-120450MEDIUMLaraDashboard 1.4.0 before 1.4.9 Improper Authorization via MCP send-email ToolEPSS 0.2%CVE-2026-90931MEDIUMLaraDashboard 0.9.0 through 1.2.2 Stored XSS via SVG UploadEPSS 0.2%CVE-2026-120488MEDIUMLaraDashboard before 1.4.9 Stored XSS via LaraBuilder design_json Block ContentEPSS 0.2%