Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

laradashboard — Vulnerabilities & Security Advisories 15

Browse all 15 CVE security advisories affecting laradashboard. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page aggregates security weaknesses associated with the laradashboard vendor, focusing on common weakness classifications. It collects vulnerability data spanning from the initial release of the software through the present date, ensuring a comprehensive view of historical and current risks. By examining these records, users can track laradashboard's security advisories over time, analyze patterns within specific weakness classes, and lookup the complete vulnerability history of this product. The dataset is curated to provide transparency into how the vendor addresses security flaws, helping administrators and developers assess potential exposures in their environments. This resource serves as a centralized reference for understanding the security posture of laradashboard without requiring manual searches across multiple disclosure channels. It supports informed decision-making by presenting aggregated information in a structured manner, facilitating better risk management and patch prioritization for organizations relying on this software. The content reflects publicly available reports and vendor notices, offering a factual basis for security reviews and compliance assessments.

Top products by laradashboard: laradashboard
CVE ID Title CVSS Severity Published
CVE-2026-105129 LaraDashboard before 1.4.8 Incorrect Authorization Exposes Secrets via Settings API — laradashboard CWE-863 6.5 Medium 2026-10-03
CVE-2026-105130 LaraDashboard 1.4.0 before 1.4.8 Race Condition Bypasses Per-IP Registration Limit — laradashboard CWE-367 3.7 Low 2026-10-03
CVE-2026-105128 LaraDashboard before 1.4.8 Open Redirect via Email Template Builder redirect_url — laradashboard CWE-601 5.4 Medium 2026-10-03
CVE-2026-105127 LaraDashboard 1.4.2 before 1.4.8 Resource Exhaustion via Password Recovery Endpoints — laradashboard CWE-770 5.3 Medium 2026-10-03
CVE-2026-105126 LaraDashboard before 1.4.8 Privilege Escalation via Superadmin Role Tampering — laradashboard CWE-269 7.2 High 2026-10-03
CVE-2026-105125 LaraDashboard before 1.4.8 Path Traversal via /api/translations/{lang} Endpoint — laradashboard CWE-22 3.7 Low 2026-10-03
CVE-2026-90933 laradashboard through 1.2.2 Missing Authorization via License API — laradashboard CWE-862 7.1 High 2026-09-14
CVE-2026-90931 LaraDashboard 0.9.0 through 1.2.2 Stored XSS via SVG Upload — laradashboard CWE-79 5.4 Medium 2026-09-14
CVE-2026-90932 LaraDashboard 0.9.2 through 1.2.2 Path Traversal RCE — laradashboard CWE-73 7.2 High 2026-09-14
CVE-2026-87821 Lara Dashboard 0.9.2 through 1.3.1 Server-Side Request Forgery in Builder Markdown Fetch — laradashboard CWE-918 7.1 High 2026-09-09
CVE-2026-86437 Lara Dashboard before 1.3.2 Incorrect Authorization in Core-Upgrade Archive Upload — laradashboard CWE-863 7.2 High 2026-09-07
CVE-2026-86438 Lara Dashboard before 1.3.2 Missing Authorization in Marketplace Module Install Action — laradashboard CWE-862 7.2 High 2026-09-07
CVE-2026-86436 Lara Dashboard before 1.3.2 Missing Authorization in Post-Builder Media Upload Endpoints — laradashboard CWE-862 5.4 Medium 2026-09-07
CVE-2026-86184 Lara Dashboard before 1.3.0 Missing Authentication in screenshot-login Route — laradashboard CWE-306 9.8 Critical 2026-09-05
CVE-2025-66509 LaraDashboard: 1-Click Pre-Auth RCE via Host Header + Module Installation Chain — laradashboard CWE-284 9.8AI Critical AI 2025-12-04

This page lists every published CVE security advisory associated with laradashboard. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.