CVE-2026-7108 in Invoice System in Laravel

Riassunto

di MITRE • 27/04/2026

A security vulnerability has been detected in code-projects Invoice System in Laravel 1.0. This affects an unknown function. Such manipulation leads to cross-site request forgery. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsabile: VulDB
• Divulgazione: 27/04/2026
• Moderazione: accettato
• Voce: VDB-359709
• CPE: pronto
• CWE: CWE-352 (confermato)
• Sfruttamento: Scaricare
• CVSS: 4.3 (VulDB)
• EPSS: 0.00155
• KEV: no
• Attività: molto basso
• Settore: Agriculture, Transportation, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-7108
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-7108
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-7108/