Laravel: Schwachstelle ermöglicht Codeausführung
NEOSEC enrichment — no mirror of the original source
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Laravel ausnutzen, um beliebigen Programmcode auszuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Mediumbsi:WID-SEC-2026-43400 linked CVEs
Open advisory with all CVEs
More on Laravel
Other advisories
- Not ratedosv:CLSA-2026-1793807886TuxCare security update for laravel/framework (1 CVE)
- Mediumbsi:WID-SEC-2026-4340Laravel: Schwachstelle ermöglicht Codeausführung
- Not ratedosv:CLSA-2026-1793793277TuxCare security update for laravel/framework (1 CVE)
- Not ratedosv:CLSA-2026-1793793106TuxCare security update for laravel/framework (1 CVE)
- Not ratedosv:CLSA-2026-1793789612TuxCare security update for laravel/framework (1 CVE)
- Not ratedosv:CLSA-2026-1793789396TuxCare security update for laravel/framework (1 CVE)
- Not ratedosv:CLSA-2026-1793789131TuxCare security update for laravel/framework (1 CVE)
- Not ratedosv:CLSA-2026-1793789039TuxCare security update for laravel/framework (1 CVE)
Other news entries
- Vulnérabilité dans Laravel (04 novembre 2026)NewsCERT-FR (ANSSI)
- Laravel: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 MoreNewsThe Hacker News
- Laravel: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Multiples vulnérabilités dans Laravel (20 octobre 2026)NewsCERT-FR (ANSSI)
- MongoDB Treiber (Python Driver, PHP Driver, C Driver, Compass und Laravel): Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Laravel: Schwachstelle ermöglicht Cross-Site ScriptingVulnerabilityBSI CERT-Bund
- MongoDB Treiber (Python Driver, PHP Driver, C Driver, Compass und Laravel): Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4340
ID