{"uuid": "70dc9211-ea1e-452e-bff7-10e6ca3e0c1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105129", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117382881287899504", "content": "CVE-2026-105129 | LaraDashboard <1.4.8 HIGH severity: settings.view users can access plaintext secrets (API keys, mail creds, tokens) via API. Patch to 1.4.8+ recommended. https://radar.offseq.com/threat/laradashboard-before-148-contains-an-incorrect-authorization-vulnerability-that-allows-authenticated-16249131d2f6c23b #OffSeq #Vulnerability #LaraDashboard #AppSec", "creation_timestamp": "2026-10-04T13:30:25.930845Z"}