CVE-2026-39976
Improper authentication in Laravel Passport
CVSS score
7.1
EPSS probability
%0.3
Risk score
0.0
Published
6 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
https://github.com/laravel/passport/issues/1900
Makefile Go / Python
Similar Vulnerabilities
9.2
CVE-2026-114509Laravel TokenGuard authentication bypass through non-string API credentials
Patch status unknown Public Exploits:10EPSS %1
6.5
CVE-2026-114508Laravel relationship inclusion can trigger unauthorized data destruction
Patch status unknownEPSS %0
8.4
CVE-2021-47756Laravel Valet 2.0.3 - Local Privilege Escalation (macOS)
Patch status unknownEPSS %0
3.1
CVE-2026-102279Laravel: XSS in Debug Page Information
Patch status unknownEPSS %0
-
CVE-2025-54068 Actively exploitedLaravel Livewire Code Injection Vulnerability
Workaround Public Exploits:7EPSS %96
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-39976"