L
Vendor security profile
laradashboard
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs11
Critical1
CISA KEV0
Public exploit8
Patch rate%73
Avg. CVSS7.2
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
5
6
CVE KEV
CVE severity distribution
11toplam CVE
Critical1 (9%)
High5 (45%)
Medium5 (45%)
Patch and exploitation view
%73
Verified patch
%0
CISA KEV
%73
Public exploit
8Patch available
0Partial
0Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
6.3
CVE-2026-105130
LaraDashboard 1.4.0 before 1.4.8 Race Condition Bypasses Per-IP Registration Limit
L
Patch verifiedEPSS %0
7.1
CVE-2026-105129
LaraDashboard before 1.4.8 Incorrect Authorization Exposes Secrets via Settings API
L
Patch verifiedEPSS %0
5.3
CVE-2026-105128
LaraDashboard before 1.4.8 Open Redirect via Email Template Builder redirect_url
L
Patch verifiedEPSS %0
6.9
CVE-2026-105127
LaraDashboard 1.4.2 before 1.4.8 Resource Exhaustion via Password Recovery Endpoints
L
Patch verifiedEPSS %0
8.6
CVE-2026-105126
LaraDashboard before 1.4.8 Privilege Escalation via Superadmin Role Tampering
L
Patch verifiedEPSS %0
6.3
CVE-2026-105125
LaraDashboard before 1.4.8 Path Traversal via /api/translations/{lang} Endpoint
L
Patch verifiedEPSS %0
7.1
CVE-2026-90933
laradashboard through 1.2.2 Missing Authorization via License API
L
Patch status unknownEPSS %0
8.6
CVE-2026-90932
LaraDashboard 0.9.2 through 1.2.2 Path Traversal RCE
L
Patch status unknownEPSS %1
5.1
CVE-2026-90931
LaraDashboard 0.9.0 through 1.2.2 Stored XSS via SVG Upload
L
Patch status unknownEPSS %0
8.6
CVE-2026-86438
Lara Dashboard before 1.3.2 Missing Authorization in Marketplace Module Install Action
L
Patch verifiedEPSS %1