{"metadata": {"vulnerability": "CVE-2026-114509", "count": 49, "kinds": {"milestone": 5, "sighting": 27, "kev": 5, "other": 12}}, "data": [{"timestamp": "2026-10-19T22:00:00Z", "date_only": false, "value": "2026-10-19T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4046", "record": "WID-SEC-W-2026-4046", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-19T22:00:00Z", "date_only": false, "value": "2026-10-19T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4046", "record": "WID-SEC-W-2026-4046", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-19T22:00:00Z", "date_only": false, "value": "2026-10-19T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4046", "record": "WID-SEC-W-2026-4046", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-21T16:15:06.492Z", "date_only": false, "value": "2026-10-21T16:15:06.492Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-114509", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-21T21:49:29.486Z", "date_only": false, "value": "2026-10-21T21:49:29.486Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-114509", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-21T21:49:29.486Z", "date_only": false, "value": "2026-10-21T21:49:29.486Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-114509", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-21T21:53:58.492Z", "date_only": false, "value": "2026-10-21T21:53:58.492323Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117481120589839105", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "cba8ddd3-785c-4007-b5d1-38dd511c4e2d", "content": "CVE-2026-114509 Laravel TokenGuard authentication bypass through non-string API credentials Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configured as a standard token-based API guard does not reject a crafted non-string credential. Under affected MySQL or MariaDB configurations, the authentication lookup can match an unintended existing user, allowing an unauthenticated attacker to bypass authentication and take over an account on routes protected by TokenGuard. This issue is fixed in versions 12.68.0 and 13.29.0.\nhttps://www.cve.org/CVERecord?id=CVE-2026-114509https://github.com/laravel/framework/security/advisories/GHSA-f9x3-7vq9-cph6https://github.com/laravel/framework/commit/8dbb08bccac1be095dba4a9d259a419620f1e8a5https://github.com/laravel/framework/commit/9b21ce0a9bb2b2599978bc0b0df4abea952ad31chttps://github.com/laravel/framework/releases/tag/v12.68.0https://github.com/laravel/framework/releases/tag/v13.29.0#laravel #framework#CVE_2026_114509#bot", "url": "https://infosec.exchange/users/cve/statuses/117481120589839105"}, {"timestamp": "2026-10-21T22:16:49Z", "date_only": false, "value": "2026-10-21T22:16:49Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F9X3-7VQ9-CPH6", "record": "GHSA-F9X3-7VQ9-CPH6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-21T22:16:49.710Z", "date_only": false, "value": "2026-10-21T22:16:49.710", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-114509", "record": "FKIE_CVE-2026-114509", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-22T00:00:38.607Z", "date_only": false, "value": "2026-10-22T00:00:38.607144Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117481618561737578", "record": "cve-2026-114509", "field": "creation_timestamp", "uuid": "0edb676f-bf5d-411f-b896-c48d20cf60f4", "content": "CVE-2026-114509: Laravel TokenGuard auth bypass (CRITICAL, CVSS 9.2) impacts <12.68.0 & 13.0.0 \u2013 13.29.0. Exploit allows account takeover via crafted credentials. Upgrade to 12.68.0/13.29.0+ now! https://radar.offseq.com/threat/cve-2026-114509-cwe-287-improper-authentication-in-laravel-framework-e0bd04cb5db6dac1 #OffSeq #Laravel #Infosec #CVE2026114509", "url": "https://infosec.exchange/users/offseq/statuses/117481618561737578"}, {"timestamp": "2026-10-22T01:04:08Z", "date_only": false, "value": "2026-10-22T01:04:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/laravel-disponibile-poc-per-lo-sfruttamento-della-cve-2026-114509", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "f585385a-4f78-422d-ac5b-a1659040ce71", "url": "https://www.acn.gov.it/portale/w/laravel-disponibile-poc-per-lo-sfruttamento-della-cve-2026-114509"}, {"timestamp": "2026-10-22T06:04:08Z", "date_only": false, "value": "2026-10-22T06:04:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/laravel-disponibile-poc-per-lo-sfruttamento-della-cve-2026-114509", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "289a99d1-bf1d-46c1-bc3a-89632227627b", "content": "Disponibile Proof of Concept (PoC) per lo sfruttamento della CVE-2026-114509 presente in Laravel, noto framework open source per lo sviluppo di applicazioni web. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di eludere i meccanismi di autenticazione sui sistemi interessati, consentendo di impersonare un altro utente.", "url": "https://www.acn.gov.it/portale/w/laravel-disponibile-poc-per-lo-sfruttamento-della-cve-2026-114509"}, {"timestamp": "2026-10-22T07:00:13Z", "date_only": false, "value": "2026-10-22T07:00:13.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/rMvNlRTTLU74Jl0MJFy19Wyqh0AhZDI40aKKyM5wRtNVqbQ", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "b1588047-9d4a-4fe1-bbbd-2a327e1640d0"}, {"timestamp": "2026-10-22T17:29:28.470Z", "date_only": false, "value": "2026-10-22T17:29:28.470", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-114509", "record": "FKIE_CVE-2026-114509", "field": "lastModified"}, {"timestamp": "2026-10-22T22:00:00Z", "date_only": false, "value": "2026-10-22T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4046", "record": "WID-SEC-W-2026-4046", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-22T22:00:00Z", "date_only": false, "value": "2026-10-22T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4046", "record": "WID-SEC-W-2026-4046", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-23T07:05:57.048Z", "date_only": false, "value": "2026-10-23T07:05:57.048+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4046", "record": "WID-SEC-W-2026-4046", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-23T21:50:27Z", "date_only": false, "value": "2026-10-23T21:50:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F9X3-7VQ9-CPH6", "record": "GHSA-F9X3-7VQ9-CPH6", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T21:50:27Z", "date_only": false, "value": "2026-10-23T21:50:27Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F9X3-7VQ9-CPH6", "record": "GHSA-F9X3-7VQ9-CPH6", "field": "modified"}, {"timestamp": "2026-10-24T03:00:10Z", "date_only": false, "value": "2026-10-24T03:00:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ukc8Sl4vTRe6yF5QQQjDOWS_gcjMmx_OYzSqPhah_Kpo_Eg", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "01f6f05b-e31e-4d9e-b49c-94fcfee8d4b1", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-24T03:00:10Z", "date_only": false, "value": "2026-10-24T03:00:10.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ukc8Sl4vTRe6yF5QQQjDOWS_gcjMmx_OYzSqPhah_Kpo_Eg", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "3a29243a-fb3d-4e7f-b697-44ae2654cd91"}, {"timestamp": "2026-10-24T09:00:04Z", "date_only": false, "value": "2026-10-24T09:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/7PXV-83QjReGkssO0wbfl-RKsaL2nWh8QI6kWFeKbAXsoa0", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "9d85f6e0-1d97-48f2-8962-85bf44b23268", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-24T09:00:04Z", "date_only": false, "value": "2026-10-24T09:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/7PXV-83QjReGkssO0wbfl-RKsaL2nWh8QI6kWFeKbAXsoa0", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "adcc5e37-e61f-4a8a-8c75-0c64c83178a9"}, {"timestamp": "2026-10-24T11:00:09Z", "date_only": false, "value": "2026-10-24T11:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/106975", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "d5d3ad98-635f-4f04-8400-41d66790a670", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-114509-laravel-tokenguard\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ArioVeisa\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-24 10:39:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-114509 \u2014 Laravel TokenGuard authentication bypass (CVSS 9.2): PoC, root-cause analysis, Docker lab, and reproduction guide\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/106975", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-24T11:00:09Z", "date_only": false, "value": "2026-10-24T11:00:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/106975", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "1c9089eb-2731-4264-8854-3259278d20ba", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-114509-laravel-tokenguard\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ArioVeisa\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-24 10:39:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-114509 \u2014 Laravel TokenGuard authentication bypass (CVSS 9.2): PoC, root-cause analysis, Docker lab, and reproduction guide\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/106975"}, {"timestamp": "2026-10-24T21:00:05Z", "date_only": false, "value": "2026-10-24T21:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/2oEYfTGXGJ-ISgrh-OGpHmh35so5M9r2imUdmcKULtpCQhA", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "3ba06c58-3d67-42c7-8588-da2f1925fb0d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-24T21:00:05Z", "date_only": false, "value": "2026-10-24T21:00:05.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/2oEYfTGXGJ-ISgrh-OGpHmh35so5M9r2imUdmcKULtpCQhA", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "3f49fec6-2934-40a8-913f-7d445501c83c"}, {"timestamp": "2026-10-24T23:00:14Z", "date_only": false, "value": "2026-10-24T23:00:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/XDpNcdCGtCbO0nePYX31McFEcZMfArEJSlE8IwTh6vMtZxM", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "fa5507e4-dcff-4bdb-b2d1-84af70355fdb", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-24T23:00:14Z", "date_only": false, "value": "2026-10-24T23:00:14.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/XDpNcdCGtCbO0nePYX31McFEcZMfArEJSlE8IwTh6vMtZxM", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "a51c056a-859f-4134-bdfc-14da01539277"}, {"timestamp": "2026-10-25T03:00:05Z", "date_only": false, "value": "2026-10-25T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/PZuGw5r-3xGAa6Z3RNHg2PPKGeABP2aGLTwKyz61XUz5Zy0", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "a78e60eb-db9e-45a8-a868-2b050c678356", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-25T03:00:05Z", "date_only": false, "value": "2026-10-25T03:00:05.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/PZuGw5r-3xGAa6Z3RNHg2PPKGeABP2aGLTwKyz61XUz5Zy0", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "e5828878-f31c-45e9-b6af-033549bb49a6"}, {"timestamp": "2026-10-25T14:00:08Z", "date_only": false, "value": "2026-10-25T14:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/107198", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "cb2652b4-d3b8-415a-bc60-ed90d53b0609", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-114509\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dimasma0305\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-25 13:40:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducible local Laravel lab and self-checking PoC for CVE-2026-114509\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/107198", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-25T14:00:08Z", "date_only": false, "value": "2026-10-25T14:00:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/107198", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "1ec3e04e-3022-424e-acfd-4126c96617c7", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-114509\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dimasma0305\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-25 13:40:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducible local Laravel lab and self-checking PoC for CVE-2026-114509\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/107198"}, {"timestamp": "2026-10-25T22:38:11.367Z", "date_only": false, "value": "2026-10-25T22:38:11.367794Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3myqbj5ch6l2z", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "12084972-bff2-4e39-989d-5cf9d9f76845", "content": "CVE-2026-114509 is trending. Hype score 3, currently #7 on cvemon.\n\nLaravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configured as a standard token-based API guard does not reject a crafted non-string credential.\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-114509", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3myqbj5ch6l2z"}, {"timestamp": "2026-10-27T11:00:10Z", "date_only": false, "value": "2026-10-27T11:00:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/FMgUKRisBtLQxL16zHY6rh6Fdh98oPAa4W3lmoYf6QoOzHc", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "c3e41fb5-6fb5-4a55-b836-d70a5cf32ac6", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-27T11:00:10Z", "date_only": false, "value": "2026-10-27T11:00:10.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/FMgUKRisBtLQxL16zHY6rh6Fdh98oPAa4W3lmoYf6QoOzHc", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "7903d6d8-568b-4c00-9ca2-20dbed96d1b1"}, {"timestamp": "2026-10-27T15:20:31Z", "date_only": false, "value": "2026-10-27T15:20:31+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-114509", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "bb03f5ed-afaa-430a-9094-546e1d51aaac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-27T15:20:31Z", "date_only": false, "value": "2026-10-27T15:20:31+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-114509", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "bb03f5ed-afaa-430a-9094-546e1d51aaac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-27T15:20:31Z", "date_only": false, "value": "2026-10-27T15:20:31+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-114509", "field": "status.status_updated_at", "uuid": "bb03f5ed-afaa-430a-9094-546e1d51aaac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-27T15:20:31.851Z", "date_only": false, "value": "2026-10-27T15:20:31.851Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-114509", "field": "evidence.0.details.added_date", "uuid": "bb03f5ed-afaa-430a-9094-546e1d51aaac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-27T18:32:49.985Z", "date_only": false, "value": "2026-10-27T18:32:49.985575Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/suriq.io/post/3myuuqat7ow22", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "82c73463-70ee-481c-8bae-6e34a8bdee4e", "content": "CVE-2026-114509: Laravel framework TokenGuard API authentication can be bypassed with a crafted non-string credential on some MySQL or MariaDB setups, allowing account takeover. No exploitation confirmed by the vendor. Fixed in 12.68.0 and 13.29.0.", "url": "https://bsky.app/profile/suriq.io/post/3myuuqat7ow22"}, {"timestamp": "2026-10-27T23:00:18Z", "date_only": false, "value": "2026-10-27T23:00:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/l-WQIv3ub-dQuO871pspMZfbPaR0XYlNeEz8gM-_O1_vjCg", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "f6bb50d5-3604-469b-86c5-5f6ca1082504", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-27T23:00:18Z", "date_only": false, "value": "2026-10-27T23:00:18.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/l-WQIv3ub-dQuO871pspMZfbPaR0XYlNeEz8gM-_O1_vjCg", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "87fce1f4-3977-481a-b82d-c7b59f2cc83a"}, {"timestamp": "2026-10-28T14:29:23Z", "date_only": false, "value": "2026-10-28T14:29:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bdufstecru/3556", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "230b76a0-2cb1-4066-9d42-5ddf6bc659d6", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 TokenGuard PHP-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 Laravel \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0442\u0438\u043f\u0430 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\n\nBDU:2026-17775\nCVE-2026-114509\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/laravel/framework/releases/tag/v12.68.0\nhttps://github.com/laravel/framework/releases/tag/v13.29.0", "url": "https://t.me/bdufstecru/3556"}, {"timestamp": "2026-10-28T16:00:01Z", "date_only": false, "value": "2026-10-28T16:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-114509", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "bb03f5ed-afaa-430a-9094-546e1d51aaac", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-28T16:00:30.354Z", "date_only": false, "value": "2026-10-28T16:00:30.354143Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bb03f5ed-afaa-430a-9094-546e1d51aaac", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "add02218-952a-4597-8ba1-38116c7e2fdf", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bb03f5ed-afaa-430a-9094-546e1d51aaac", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-28T18:32:04.286Z", "date_only": false, "value": "2026-10-28T18:32:04.286628Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-114509", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-28T18:32:28.863Z", "date_only": false, "value": "2026-10-28T18:32:28.863Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-114509", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-28T18:32:28.863Z", "date_only": false, "value": "2026-10-28T18:32:28.863Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-114509", "field": "containers.adp.0.providerMetadata.dateUpdated"}], "metrics": {"as_of": "2026-10-29T11:57:11.368Z", "anchors": {"origin": {"timestamp": "2026-10-19T22:00:00Z", "date_only": false, "value": "2026-10-19T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4046", "record": "WID-SEC-W-2026-4046", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-19T22:00:00Z", "date_only": false, "value": "2026-10-19T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4046", "record": "WID-SEC-W-2026-4046", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-10-24T03:00:10Z", "date_only": false, "value": "2026-10-24T03:00:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ukc8Sl4vTRe6yF5QQQjDOWS_gcjMmx_OYzSqPhah_Kpo_Eg", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "01f6f05b-e31e-4d9e-b49c-94fcfee8d4b1", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2026-10-27T15:20:31Z", "date_only": false, "value": "2026-10-27T15:20:31+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-114509", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "bb03f5ed-afaa-430a-9094-546e1d51aaac", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 667231.0, "hours": 185.34194444444444, "days": 7.722581018518518, "min_seconds": 667231.0, "max_seconds": 667231.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-19T22:00:00Z", "date_only": false, "value": "2026-10-19T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4046", "record": "WID-SEC-W-2026-4046", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-27T15:20:31Z", "date_only": false, "value": "2026-10-27T15:20:31+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-114509", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "bb03f5ed-afaa-430a-9094-546e1d51aaac", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 667231.0, "hours": 185.34194444444444, "days": 7.722581018518518, "min_seconds": 667231.0, "max_seconds": 667231.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-19T22:00:00Z", "date_only": false, "value": "2026-10-19T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4046", "record": "WID-SEC-W-2026-4046", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-27T15:20:31Z", "date_only": false, "value": "2026-10-27T15:20:31+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-114509", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "bb03f5ed-afaa-430a-9094-546e1d51aaac", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 363610.0, "hours": 101.00277777777778, "days": 4.208449074074074, "min_seconds": 363610.0, "max_seconds": 363610.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-19T22:00:00Z", "date_only": false, "value": "2026-10-19T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4046", "record": "WID-SEC-W-2026-4046", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-24T03:00:10Z", "date_only": false, "value": "2026-10-24T03:00:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ukc8Sl4vTRe6yF5QQQjDOWS_gcjMmx_OYzSqPhah_Kpo_Eg", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "01f6f05b-e31e-4d9e-b49c-94fcfee8d4b1", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 827831.368538, "hours": 229.95315792722224, "days": 9.581381580300926, "min_seconds": 827831.368538, "max_seconds": 827831.368538, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-19T22:00:00Z", "date_only": false, "value": "2026-10-19T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-4046", "record": "WID-SEC-W-2026-4046", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T11:57:11.368Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 160600.368538, "hours": 44.61121348277778, "days": 1.8588005617824075, "min_seconds": 160600.368538, "max_seconds": 160600.368538, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-27T15:20:31Z", "date_only": false, "value": "2026-10-27T15:20:31+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-114509", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "bb03f5ed-afaa-430a-9094-546e1d51aaac", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-10-29T11:57:11.368Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 464221.368538, "hours": 128.95038014944444, "days": 5.372932506226852, "min_seconds": 464221.368538, "max_seconds": 464221.368538, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-24T03:00:10Z", "date_only": false, "value": "2026-10-24T03:00:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ukc8Sl4vTRe6yF5QQQjDOWS_gcjMmx_OYzSqPhah_Kpo_Eg", "record": "CVE-2026-114509", "field": "creation_timestamp", "uuid": "01f6f05b-e31e-4d9e-b49c-94fcfee8d4b1", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-29T11:57:11.368Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}