{"metadata": {"vulnerability": "CVE-2026-110629", "count": 14, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-03-03T00:00:00Z", "date_only": false, "value": "2026-03-03T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-110629", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-14T13:07:29.774Z", "date_only": false, "value": "2026-10-14T13:07:29.774Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-110629", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T14:17:03.868Z", "date_only": false, "value": "2026-10-14T14:17:03.868Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110629", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T14:17:03.868Z", "date_only": false, "value": "2026-10-14T14:17:03.868Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-110629", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T15:17:15Z", "date_only": false, "value": "2026-10-14T15:17:15Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-H9JR-9J2X-QPFM", "record": "GHSA-H9JR-9J2X-QPFM", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T15:17:15.700Z", "date_only": false, "value": "2026-10-14T15:17:15.700", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110629", "record": "FKIE_CVE-2026-110629", "field": "published"}, {"timestamp": "2026-10-14T15:32:27Z", "date_only": false, "value": "2026-10-14T15:32:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-H9JR-9J2X-QPFM", "record": "GHSA-H9JR-9J2X-QPFM", "field": "published"}, {"timestamp": "2026-10-14T15:32:27Z", "date_only": false, "value": "2026-10-14T15:32:27Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-H9JR-9J2X-QPFM", "record": "GHSA-H9JR-9J2X-QPFM", "field": "modified"}, {"timestamp": "2026-10-14T16:22:47.941Z", "date_only": false, "value": "2026-10-14T16:22:47.941064Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110629", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T16:22:47.941Z", "date_only": false, "value": "2026-10-14T16:22:47.941064Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110629", "record": "FKIE_CVE-2026-110629", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T17:32:32.663Z", "date_only": false, "value": "2026-10-14T17:32:32.663Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-110629", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T17:32:32.663Z", "date_only": false, "value": "2026-10-14T17:32:32.663Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110629", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T19:34:45.326Z", "date_only": false, "value": "2026-10-14T19:34:45.326104Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117440936992109803", "record": "CVE-2026-110629", "field": "creation_timestamp", "uuid": "3646ef7c-544b-4ff4-8987-e14d84d7003d", "content": "CVE-2026-110629 VentureDrake Laravel CRM before 2.4.0 Missing Authorization via Livewire Actions VentureDrake Laravel CRM before 2.4.0 contains a missing authorization vulnerability that allows authenticated users to bypass Spatie role permissions through Livewire action methods. Read-only users can invoke delete, won, lost or reopen methods on components like DealIndex, or use unguarded Activities and Products routes, to modify deals, quotes, orders and invoices.\nhttps://www.cve.org/CVERecord?id=CVE-2026-110629https://github.com/venturedrake/laravel-crm/issues/79https://github.com/venturedrake/laravel-crm/issues/80https://github.com/venturedrake/laravel-crm/blob/fee88f9f95f18302a49e739298885b455beb02e5/src/Livewire/Deals/DealIndex.php#L125-L170https://github.com/venturedrake/laravel-crm/blob/fee88f9f95f18302a49e739298885b455beb02e5/src/Http/routes.php#L573-L581https://github.com/venturedrake/laravel-crm/commit/1a280cb22fc006f63fb96fe540dc4d651a8fb0a8https://github.com/venturedrake/laravel-crm/commit/cc41264eff5563f470984b8d2cfcc9ab4583c586https://github.com/venturedrake/laravel-crm/commit/049fc966029234a6d0f02b69efeabdb16e35bbb0https://github.com/venturedrake/laravel-crm/commit/78dbf4e41afe48def4037c69d5dd7a34820122c3https://github.com/venturedrake/laravel-crm/releases/tag/2.4.0https://github.com/venturedrake/laravel-crmhttps://www.vulncheck.com/advisories/venturedrake-laravel-crm-before-2.4.0-missing-authorization-via-livewire-actions#venturedrake #laravel-crm#CVE_2026_110629#bot", "url": "https://infosec.exchange/users/cve/statuses/117440936992109803"}, {"timestamp": "2026-10-16T19:18:44.867Z", "date_only": false, "value": "2026-10-16T19:18:44.867", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110629", "record": "FKIE_CVE-2026-110629", "field": "lastModified"}]}