Products: 2
Vulnerabilities: 11
Known Exploited: 0
0
Critical Level Threats
5
High Level Threats
5
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-54181
backpack/crud: Stored XSS in the color column — the `@if($column['escaped'])` branches are inverted
Last Modified: Sep 15, 2026
Published: Sep 14, 2026
CVE-2026-54177
backpack/crud: HasUploadFields keeps the attacker-supplied file extension — public-disk uploads of `shell.php` reach the webserver
Last Modified: Sep 16, 2026
Published: Sep 14, 2026
CVE-2026-54176
backpack/crud: MyAccountController allows changing the login email without a current-password check
Last Modified: Sep 15, 2026
Published: Sep 14, 2026
CVE-2026-54180
backpack/crud: CRUD panel query scopes are not enforced on Update, Delete, and Reorder (cross-tenant IDOR)
Last Modified: Sep 15, 2026
Published: Sep 14, 2026
CVE-2026-57570
backpack/crud: HasMany/MorphMany relation fields allow cross-tenant record re-parenting (IDOR) via attachManyRelation
Last Modified: Sep 15, 2026
Published: Sep 14, 2026
Items Per Page
