Skip to content
OpenAdvisories

Vendor

LaraDashboard

18 known vulnerabilities.

Products

LaraDashboard 18
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-105130

    LaraDashboard 1.4.0 before 1.4.8 Race Condition Bypasses Per-IP Registration Limit

    LaraDashboard from 1.4.0 before 1.4.8 contains a race condition vulnerability in RegisterController::register that allows unauthenticated attackers to bypass the per-IP daily registration limit. Attackers can send many concurrent registration requests from on…

    LaraDashboard LaraDashboard
  • Low 3.7
    CVE-2026-105125

    LaraDashboard before 1.4.8 Path Traversal via /api/translations/{lang} Endpoint

    LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON files by manipulating the {lang} route segment. On Windows hosts, attackers can send URL-encoded backslash sequences like ..%5C to escape res…

    LaraDashboard LaraDashboard