CVE-2026-114509Vulnerability
Reported by 1 independent source · first reported by The Hacker News · last reported
Last reported 2 days ago
What the reports say
1 report, newest first · the exact sentence from each-
ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More“Laravel has patched a critical security flaw (CVE-2026-114509, CVSS score: 9.2) that could allow its built-in TokenGuard to be bypassed to authenticate as an arbitrary existing user without knowledge of their valid API token.”
Indicators reported together
named in the same reports- 119.13.79[.]145in 1 report
- 210.242.76[.]32in 1 report
- 211.20.144[.]116in 1 report
- blueskyweb[.]xyzin 1 report
- riskified-okta[.]comin 1 report
- shipmonk-servicenow[.]comin 1 report
Copy these 6 indicators · defanged
Also named with it: CVE-2024-4577, CVE-2024-40766, CVE-2023-27532, CVE-2022-47945, CVE-2020-3259, CVE-2021-41773, CVE-2026-107186, CVE-2026-107187, CVE-2026-107188, CVE-2023-20269, CVE-2024-40711, CVE-2026-113380, CVE-2026-65162, CVE-2017-9841
Thanks — we review every report.