Vulnerabilidades em LaraDashboard
18 resultadosAnálise Vexday
O fornecedor LaraDashboard possui 3 CVEs na base do Vexday, nenhuma sob exploração ativa registrada no catálogo KEV e nenhuma classificada como crítica pelo CVSS. A fraqueza predominante é o CWE-863 (autorização inadequada), e as três vulnerabilidades foram publicadas nos últimos 90 dias, indicando risco recente que merece acompanhamento de patches e revisão dos controles de acesso.
CVE-2026-86438HIGHLara Dashboard before 1.3.2 Missing Authorization in Marketplace Module Install ActionEPSS 1.1%CVE-2026-86184CRITICALLara Dashboard before 1.3.0 Missing Authentication in screenshot-login RouteEPSS 1.1%CVE-2026-90932HIGHLaraDashboard 0.9.2 through 1.2.2 Path Traversal RCEEPSS 0.8%CVE-2026-86437HIGHLara Dashboard before 1.3.2 Incorrect Authorization in Core-Upgrade Archive UploadEPSS 0.7%CVE-2026-86436MEDIUMLara Dashboard before 1.3.2 Missing Authorization in Post-Builder Media Upload EndpointsEPSS 0.5%CVE-2026-105127MEDIUMLaraDashboard 1.4.2 before 1.4.8 Resource Exhaustion via Password Recovery EndpointsEPSS 0.5%CVE-2026-105126HIGHLaraDashboard before 1.4.8 Privilege Escalation via Superadmin Role TamperingEPSS 0.5%CVE-2026-120487HIGHLaraDashboard before 1.4.5 Incorrect Authorization via SettingPolicy Core UpgradesEPSS 0.5%CVE-2026-87821HIGHLara Dashboard 0.9.2 through 1.3.1 Server-Side Request Forgery in Builder Markdown FetchEPSS 0.5%CVE-2025-66509HIGHLaraDashboard: 1-Click Pre-Auth RCE via Host Header + Module Installation ChainEPSS 0.4%CVE-2026-105128MEDIUMLaraDashboard before 1.4.8 Open Redirect via Email Template Builder redirect_urlEPSS 0.3%CVE-2026-105125MEDIUMLaraDashboard before 1.4.8 Path Traversal via /api/translations/{lang} EndpointEPSS 0.3%CVE-2026-105129HIGHLaraDashboard before 1.4.8 Incorrect Authorization Exposes Secrets via Settings APIEPSS 0.3%CVE-2026-90933HIGHlaradashboard through 1.2.2 Missing Authorization via License APIEPSS 0.3%CVE-2026-105130MEDIUMLaraDashboard 1.4.0 before 1.4.8 Race Condition Bypasses Per-IP Registration LimitEPSS 0.3%CVE-2026-120450MEDIUMLaraDashboard 1.4.0 before 1.4.9 Improper Authorization via MCP send-email ToolEPSS 0.2%CVE-2026-90931MEDIUMLaraDashboard 0.9.0 through 1.2.2 Stored XSS via SVG UploadEPSS 0.2%CVE-2026-120488MEDIUMLaraDashboard before 1.4.9 Stored XSS via LaraBuilder design_json Block ContentEPSS 0.2%