{"id":"CVE-2026-114509","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-114509","generatedAt":"2026-10-28T01:53:28.966Z","title":"Under affected MySQL or MariaDB configurations, the authentication lookup can match an unintended existing user, allowing an unauthenticated attacker to bypass authentication and take over an account on routes protected by TokenGuard.","description":"Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configured as a standard token-based API guard does not reject a crafted non-string credential. Under affected MySQL or MariaDB configurations, the authentication lookup can match an unintended existing user, allowing an unauthenticated attacker to bypass authentication and take over an account on routes protected by TokenGuard. This issue is fixed in versions 12.68.0 and 13.29.0.","published":"2026-10-21T22:16:50.000Z","lastModified":"2026-10-22T17:29:28.000Z","status":"Awaiting Analysis","sourceIdentifier":"security-advisories@github.com","cvss":{"version":"4.0","score":9.2,"severity":"CRITICAL","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-287","CWE-1287"],"affected":[],"epss":{"score":0.00696,"percentile":0.52763,"date":"2026-10-26","history":[{"date":"2026-10-22","score":0.00403,"percentile":0.33431}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.70%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[{"kind":"new","label":"New CVE","at":"2026-10-21T22:16:50.000Z","detail":{"score":"9.2","severity":"CRITICAL","publishedAt":"2026-10-21T22:16:49.710Z"},"summary":"New CVE, critical severity (CVSS 9.2)."}],"references":[{"url":"https://github.com/laravel/framework/commit/8dbb08bccac1be095dba4a9d259a419620f1e8a5","source":"security-advisories@github.com"},{"url":"https://github.com/laravel/framework/commit/9b21ce0a9bb2b2599978bc0b0df4abea952ad31c","source":"security-advisories@github.com"},{"url":"https://github.com/laravel/framework/releases/tag/v12.68.0","source":"security-advisories@github.com"},{"url":"https://github.com/laravel/framework/releases/tag/v13.29.0","source":"security-advisories@github.com"},{"url":"https://github.com/laravel/framework/security/advisories/GHSA-f9x3-7vq9-cph6","source":"security-advisories@github.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-114509","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}