Laravel

Everything Threat Times has reported about Laravel: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Laravel TokenGuard flaw allows authentication bypass in API routes

Threat TimesOct 21, 2026

A critical vulnerability in Laravel’s TokenGuard enables unauthenticated attackers to hijack accounts via crafted credentials on specific database setups.

Vulnerabilities

Rapyd Admin 9.20.0 Fixes Critical Hardcoded Credential Flaw Exposing Super-Admin Access

Threat TimesOct 12, 2026

A critical vulnerability in Rapyd Admin allowed unauthenticated attackers to bypass security controls using default credentials seeded by the installer.