https://vulnerability.circl.lu/sightings/feed 2026-09-07T16:10:51.881803+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/1abe0344-8670-4e53-b756-8a50afde7fee/export 2026-09-07T16:10:51.890019+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1abe0344-8670-4e53-b756-8a50afde7fee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-xwpv-pqxp-5v36", "type": "seen", "source": "https://gist.github.com/alon710/c47c604ce50ae0fa194515af5d7d206b", "content": "# CVE-2026-84307: CVE-2026-84307: Authentication Oracle and Multi-Factor Authentication Challenge Leak in Filament\n\n> **CVSS Score:** 3.7\n> **Published:** 2026-09-01\n> **Full Report:** https://cvereports.com/reports/CVE-2026-84307\n\n## Summary\nAn authentication oracle vulnerability exists in Filament before 4.12.5 and 5.7.5. The application initiates MFA challenge workflows prior to verifying user authorization policies, allowing unauthenticated attackers to validate guessed credentials.\n\n## TL;DR\nFilament leaked credential validity by triggering MFA flows before verifying user authorization checks.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-204\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 3.7 (Low)\n- **EPSS Score**: Not Available\n- **Impact**: Credential Enumeration / Information Disclosure\n- **Exploit Status**: Proof of Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- filamentphp/filament\n- **Filament**: >= 4.0.0, < 4.12.5 (Fixed in: `4.12.5`)\n- **Filament**: >= 5.0.0, < 5.7.5 (Fixed in: `5.7.5`)\n\n## Mitigation\n\n- Upgrade Filament to version 4.12.5 or 5.7.5\n- Implement strict rate limiting on the login endpoints\n- Monitor outbound MFA email notifications for anomalous surges\n\n**Remediation Steps:**\n1. Run 'composer update filament/filament' to retrieve the latest secure package versions.\n2. Verify the installed version in composer.lock is at least 4.12.5 or 5.7.5.\n3. Deploy the updated application to production environments.\n\n## References\n\n- [NVD CVE-2026-84307 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-84307)\n- [GitHub Security Advisory GHSA-xwpv-pqxp-5v36](https://github.com/filamentphp/filament/security/advisories/GHSA-xwpv-pqxp-5v36)\n- [Filament Pull Request #20308](https://github.com/filamentphp/filament/pull/20308)\n- [Fix Commit ad5aacbc6d089b3dd7243ec1c1f8ab19dff7c3a1](https://github.com/filamentphp/filament/commit/ad5aacbc6d089b3dd7243ec1c1f8ab19dff7c3a1)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-84307) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-02T01:32:29.548831Z"} 2026-09-02T01:32:29.548831+00:00