Threats tagged 'ghsa-f9x3-7vq9-cph6'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.2	CVE-2026-114509Framework · Laravel TokenGuard authentication bypass through non-string API credentials Critical9.22026-10-23GCVE DatabaseCVE-2026-114509 Laravel's TokenGuard authentication mechanism can be bypassed under certain database configurations (MySQL/MariaDB) by submitting a specially crafted non-string API credential. This flaw allows an attacker to authenticate as any existing user without knowing their valid API token, leading to potential account takeover on routes protected by the affected guard. Report on CVE-2026-114509 Vulnerability CWE-1287 #ghsa-f9x3-7vq9-cph6 #packagist	GCVE Database	2026-10-23

Page 1 of 1