Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

laradashboard — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in laradashboard, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability records for the laradashboard product, categorized under general software weaknesses with a focus on dashboard security. It collects data regarding various security flaws, including cross-site scripting, insecure direct object references, and improper authorization checks, covering reported incidents from 2018 through 2024. This comprehensive collection allows security professionals to track a vendor's advisory history as they respond to identified issues, understand the prevalence and impact of specific weakness classes within dashboard applications, and look up a product's vulnerability history to assess its long-term security posture. By centralizing these disparate data points, the page facilitates deeper analysis of how laradashboard handles security disclosures over time. Users can identify patterns in remediation speeds, evaluate the severity of past incidents, and compare these findings against industry standards for similar software tools. The information presented is sourced from public advisories and vulnerability databases, ensuring that the historical record is transparent and accessible for independent verification. This approach supports proactive risk management by highlighting recurring issues that may indicate systemic design flaws or insufficient testing procedures. Consequently, administrators and developers can use this resource to make informed decisions about updates, patching strategies, and potential migrations if the accumulated risk exceeds acceptable thresholds for their specific deployment environments.

Vendor: laradashboard

CVE ID Title CVSS Severity Published
CVE-2026-105129 LaraDashboard before 1.4.8 Incorrect Authorization Exposes Secrets via Settings API CWE-863 6.5 Medium 2026-10-03
CVE-2026-105130 LaraDashboard 1.4.0 before 1.4.8 Race Condition Bypasses Per-IP Registration Limit CWE-367 3.7 Low 2026-10-03
CVE-2026-105128 LaraDashboard before 1.4.8 Open Redirect via Email Template Builder redirect_url CWE-601 5.4 Medium 2026-10-03
CVE-2026-105127 LaraDashboard 1.4.2 before 1.4.8 Resource Exhaustion via Password Recovery Endpoints CWE-770 5.3 Medium 2026-10-03
CVE-2026-105126 LaraDashboard before 1.4.8 Privilege Escalation via Superadmin Role Tampering CWE-269 7.2 High 2026-10-03
CVE-2026-105125 LaraDashboard before 1.4.8 Path Traversal via /api/translations/{lang} Endpoint CWE-22 3.7 Low 2026-10-03
CVE-2026-90933 laradashboard through 1.2.2 Missing Authorization via License API CWE-862 7.1 High 2026-09-14
CVE-2026-90931 LaraDashboard 0.9.0 through 1.2.2 Stored XSS via SVG Upload CWE-79 5.4 Medium 2026-09-14
CVE-2026-90932 LaraDashboard 0.9.2 through 1.2.2 Path Traversal RCE CWE-73 7.2 High 2026-09-14
CVE-2026-87821 Lara Dashboard 0.9.2 through 1.3.1 Server-Side Request Forgery in Builder Markdown Fetch CWE-918 7.1 High 2026-09-09
CVE-2026-86437 Lara Dashboard before 1.3.2 Incorrect Authorization in Core-Upgrade Archive Upload CWE-863 7.2 High 2026-09-07
CVE-2026-86438 Lara Dashboard before 1.3.2 Missing Authorization in Marketplace Module Install Action CWE-862 7.2 High 2026-09-07
CVE-2026-86436 Lara Dashboard before 1.3.2 Missing Authorization in Post-Builder Media Upload Endpoints CWE-862 5.4 Medium 2026-09-07
CVE-2026-86184 Lara Dashboard before 1.3.0 Missing Authentication in screenshot-login Route CWE-306 9.8 Critical 2026-09-05
CVE-2025-66509 LaraDashboard: 1-Click Pre-Auth RCE via Host Header + Module Installation Chain CWE-284 9.8AI Critical AI 2025-12-04

All 15 known CVE vulnerabilities affecting laradashboard with full Chinese analysis, references, and POCs where available.