/

CVE-2026-120487

Severity:

HIGH RISK

(7.2)

CVE-2026-120487

Deferred

Vulnerability type

Category:

CWE:

CWE-863

Impact:

Severity:

HIGH RISK

(7.2)

CVSS version:

3.1

Catch this CVE while code is being written

Detect vulnerable code directly in pull requests, so CVEs are fixed before merge.

Sources

SourceLink
github.comgithub.com/laradashboard/laradashboard/blob/v1.4.2/app/Policies/SettingPolicy.php#L47-L50
github.comgithub.com/laradashboard/laradashboard/commit/fdb77b898e6bb0a0df82bbf979c2bfba38a81532
github.comgithub.com/laradashboard/laradashboard/releases/tag/v1.4.5
github.comgithub.com/laradashboard/laradashboard/security/advisories/GHSA-rjjq-v76w-8jh4
vulncheck.comvulncheck.com/advisories/laradashboard-before-1.4.5-incorrect-authorization-via-settingpolicy-core-upgrades
Find out what's already
exploitable in your codebase.