Serial Number: AV26-1107 Date: October 30, 2026 As of October 28, 2026, MongoDB is affected by vulnerabilities in the following product: Laravel MongoDB Prior to 5.12.0 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Test Laravel HasOneThrough/HasManyThrough relations MongoDB Alerts
Disponibile Proof of Concept (PoC) per lo sfruttamento della CVE-2026-114509 presente in Laravel, noto framework open source per lo sviluppo di applicazioni web. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di eludere i meccanismi di autenticazione sui sistemi interessati, consentendo di impersonare un altro utente.
EPSS 0.01 CVE-2026-114509 Laravel IT
De multiples vulnérabilités ont été découvertes dans Laravel. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à l'intégrité des données et un contournement de la politique de sécurité.
Laravel FR
Une vulnérabilité a été découverte dans Laravel. Elle permet à un attaquant de provoquer une injection de code indirecte à distance (XSS).
Laravel FR
A large-scale credential theft campaign exploiting CVE-2025-54068, a critical unauthenticated remote code execution vulnerability in Laravel Livewire v3. Attackers used PHP deserialization to execute a Bash-based credential stealer that harvested sensitive application secrets ...
KEV ✓ EPSS 0.96 CVE-2025-54068 Laravel US
Attackers injected a credential stealer into 200+ versions of popular Laravel-Lang packages, delivering a credential stealer targeting cloud keys, SSH keys, browsers, crypto wallets and more. Category: Vulnerabilities & Threats
Laravel BE