8 matches found
CVE-2026-54176 backpack/crud: MyAccountController allows changing the login email without a current-password check
backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.38, MyAccountController::postAccountInfoForm at POST /admin/edit-account-info permits...
6.5CVSS0.0065EPSS
SaveExploits0References7
20