Skip to content
OpenAdvisories

Vendor

krayin

20 known vulnerabilities.

Products

laravel-crm 20
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2026-100885 Public exploit

    Krayin laravel-crm admin-config-setup API Endpoint CanInstall.php authorization

    A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of the file packages/Webkul/Installer/src/Http/Middleware/CanInstall.php of the component admin-config-setup API Endpoint. The manipulation results in authorization …

    krayin laravel-crm
  • Critical 9.8
    CVE-2026-41452 Public exploit Scanner template

    Krayin CRM 2.2.4 Missing Authentication via install/api/admin-config-setup

    Krayin CRM 2.2.4 contains a missing authentication vulnerability in the installer middleware that allows unauthenticated remote attackers to overwrite the primary administrator account by sending a crafted HTTP POST request with the X-Requested-With: XMLHttpR…

    krayin laravel-crm