agentprime: laradashboardEvery new CVE for laradashboard.https://agentprime.io/CVE-2026-120488: LaraDashboard before 1.4.9 Stored XSS via LaraBuilder design_json Block Contenthttps://agentprime.io/advisories/CVE-2026-120488/https://agentprime.io/advisories/CVE-2026-120488/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 14:29:18 GMTCVECVE-2026-120487: LaraDashboard before 1.4.5 Incorrect Authorization via SettingPolicy Core Upgradeshttps://agentprime.io/advisories/CVE-2026-120487/https://agentprime.io/advisories/CVE-2026-120487/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 14:29:17 GMTCVECVE-2026-120450: LaraDashboard 1.4.0 before 1.4.9 Improper Authorization via MCP send-email Toolhttps://agentprime.io/advisories/CVE-2026-120450/https://agentprime.io/advisories/CVE-2026-120450/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 14:29:08 GMTCVECVE-2026-105130: LaraDashboard 1.4.0 before 1.4.8 Race Condition Bypasses Per-IP Registration Limithttps://agentprime.io/advisories/CVE-2026-105130/https://agentprime.io/advisories/CVE-2026-105130/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 23:40:02 GMTCVECVE-2026-105129: LaraDashboard before 1.4.8 Incorrect Authorization Exposes Secrets via Settings APIhttps://agentprime.io/advisories/CVE-2026-105129/https://agentprime.io/advisories/CVE-2026-105129/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 23:40:01 GMTCVECVE-2026-105128: LaraDashboard before 1.4.8 Open Redirect via Email Template Builder redirect_urlhttps://agentprime.io/advisories/CVE-2026-105128/https://agentprime.io/advisories/CVE-2026-105128/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 23:40:01 GMTCVECVE-2026-105127: LaraDashboard 1.4.2 before 1.4.8 Resource Exhaustion via Password Recovery Endpointshttps://agentprime.io/advisories/CVE-2026-105127/https://agentprime.io/advisories/CVE-2026-105127/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 23:40:00 GMTCVECVE-2026-105126: LaraDashboard before 1.4.8 Privilege Escalation via Superadmin Role Tamperinghttps://agentprime.io/advisories/CVE-2026-105126/https://agentprime.io/advisories/CVE-2026-105126/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 23:39:59 GMTCVECVE-2026-105125: LaraDashboard before 1.4.8 Path Traversal via /api/translations/{lang} Endpointhttps://agentprime.io/advisories/CVE-2026-105125/https://agentprime.io/advisories/CVE-2026-105125/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 23:39:59 GMTCVECVE-2026-90933: laradashboard through 1.2.2 Missing Authorization via License APIhttps://agentprime.io/advisories/CVE-2026-90933/https://agentprime.io/advisories/CVE-2026-90933/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 12:48:28 GMTCVECVE-2026-90932: LaraDashboard 0.9.2 through 1.2.2 Path Traversal RCEhttps://agentprime.io/advisories/CVE-2026-90932/https://agentprime.io/advisories/CVE-2026-90932/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 12:48:27 GMTCVECVE-2026-90931: LaraDashboard 0.9.0 through 1.2.2 Stored XSS via SVG Uploadhttps://agentprime.io/advisories/CVE-2026-90931/https://agentprime.io/advisories/CVE-2026-90931/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 12:48:26 GMTCVECVE-2026-87821: Lara Dashboard 0.9.2 through 1.3.1 Server-Side Request Forgery in Builder Markdown Fetchhttps://agentprime.io/advisories/CVE-2026-87821/https://agentprime.io/advisories/CVE-2026-87821/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 11:21:06 GMTCVECVE-2026-86438: Lara Dashboard before 1.3.2 Missing Authorization in Marketplace Module Install Actionhttps://agentprime.io/advisories/CVE-2026-86438/https://agentprime.io/advisories/CVE-2026-86438/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 22:01:49 GMTCVECVE-2026-86437: Lara Dashboard before 1.3.2 Incorrect Authorization in Core-Upgrade Archive Uploadhttps://agentprime.io/advisories/CVE-2026-86437/https://agentprime.io/advisories/CVE-2026-86437/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 22:01:48 GMTCVECVE-2026-86436: Lara Dashboard before 1.3.2 Missing Authorization in Post-Builder Media Upload Endpointshttps://agentprime.io/advisories/CVE-2026-86436/https://agentprime.io/advisories/CVE-2026-86436/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 22:01:48 GMTCVECVE-2026-86184: Lara Dashboard before 1.3.0 Missing Authentication in screenshot-login Routehttps://agentprime.io/advisories/CVE-2026-86184/https://agentprime.io/advisories/CVE-2026-86184/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 05 Sep 2026 11:38:00 GMTCVEcriticalCVE-2025-66509: LaraDashboard: 1-Click Pre-Auth RCE via Host Header + Module Installation Chainhttps://agentprime.io/advisories/CVE-2025-66509/https://agentprime.io/advisories/CVE-2025-66509/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Dec 2025 22:10:26 GMTCVE