laradashboard vulnerabilities
18 published CVEs name laradashboard among the affected products.
- 18Published CVEs18 of them scored
- 18Last 12 monthspublished in the last year
- 1Critical9 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-120488
LaraDashboard before 1.4.9 Stored XSS via LaraBuilder design_json Block Content
LaraDashboard · LaraDashboard
Medium5.1 - CVE-2026-120487
LaraDashboard before 1.4.5 Incorrect Authorization via SettingPolicy Core Upgrades
LaraDashboard · LaraDashboard
High8.6 - CVE-2026-120450
LaraDashboard 1.4.0 before 1.4.9 Improper Authorization via MCP send-email Tool
LaraDashboard · LaraDashboard
Medium5.3 - CVE-2026-105130
LaraDashboard 1.4.0 before 1.4.8 Race Condition Bypasses Per-IP Registration Limit
laradashboard · laradashboard
Medium6.3 - CVE-2026-105129
LaraDashboard before 1.4.8 Incorrect Authorization Exposes Secrets via Settings API
laradashboard · laradashboard
High7.1 - CVE-2026-105128
LaraDashboard before 1.4.8 Open Redirect via Email Template Builder redirect_url
laradashboard · laradashboard
Medium5.3 - CVE-2026-105127
LaraDashboard 1.4.2 before 1.4.8 Resource Exhaustion via Password Recovery Endpoints
laradashboard · laradashboard
Medium6.9 - CVE-2026-105126
LaraDashboard before 1.4.8 Privilege Escalation via Superadmin Role Tampering
laradashboard · laradashboard
High8.6 - CVE-2026-105125
LaraDashboard before 1.4.8 Path Traversal via /api/translations/{lang} Endpoint
laradashboard · laradashboard
Medium6.3 - CVE-2026-90933
laradashboard through 1.2.2 Missing Authorization via License API
laradashboard · laradashboard
High7.1