CVE-2026-114508

CVE-2026-114508 published: Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read-only endpoint can trigger a destructive database operation on a related table instead of retrieving data. A user with read access but no...

View full NVD advisory → ← Back to CVE watch