{"schema":"vulnpedia.research/1","cve":"CVE-2026-110630","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/venturedrake/laravel-crm/issues/79","tags":["issue-tracking"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:04.557Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:04.557Z","url":"https://github.com/venturedrake/laravel-crm/issues/79"},{"source":"nvd","sourceId":"CVE-2026-110630","modified":"2026-10-15T14:47:05.720","url":"https://github.com/venturedrake/laravel-crm/issues/79"}]},{"url":"https://github.com/venturedrake/laravel-crm/blob/fee88f9f95f18302a49e739298885b455beb02e5/src/Http/Controllers/UserController.php#L87-L94","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:04.557Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:04.557Z","url":"https://github.com/venturedrake/laravel-crm/blob/fee88f9f95f18302a49e739298885b455beb02e5/src/Http/Controllers/UserController.php#L87-L94"},{"source":"nvd","sourceId":"CVE-2026-110630","modified":"2026-10-15T14:47:05.720","url":"https://github.com/venturedrake/laravel-crm/blob/fee88f9f95f18302a49e739298885b455beb02e5/src/Http/Controllers/UserController.php#L87-L94"}]},{"url":"https://github.com/venturedrake/laravel-crm/blob/fee88f9f95f18302a49e739298885b455beb02e5/src/Livewire/Users/UserIndex.php#L83-L90","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:04.557Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:04.557Z","url":"https://github.com/venturedrake/laravel-crm/blob/fee88f9f95f18302a49e739298885b455beb02e5/src/Livewire/Users/UserIndex.php#L83-L90"},{"source":"nvd","sourceId":"CVE-2026-110630","modified":"2026-10-15T14:47:05.720","url":"https://github.com/venturedrake/laravel-crm/blob/fee88f9f95f18302a49e739298885b455beb02e5/src/Livewire/Users/UserIndex.php#L83-L90"}]},{"url":"https://github.com/venturedrake/laravel-crm/commit/d64b59fb9f7355e1be9951fbcc5f54ed715dc212","tags":["patch"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:04.557Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:04.557Z","url":"https://github.com/venturedrake/laravel-crm/commit/d64b59fb9f7355e1be9951fbcc5f54ed715dc212"},{"source":"nvd","sourceId":"CVE-2026-110630","modified":"2026-10-15T14:47:05.720","url":"https://github.com/venturedrake/laravel-crm/commit/d64b59fb9f7355e1be9951fbcc5f54ed715dc212"}]},{"url":"https://github.com/venturedrake/laravel-crm/commit/27bd5081004913660ccb3e0181b351a2e4ded104","tags":["patch"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:04.557Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:04.557Z","url":"https://github.com/venturedrake/laravel-crm/commit/27bd5081004913660ccb3e0181b351a2e4ded104"},{"source":"nvd","sourceId":"CVE-2026-110630","modified":"2026-10-15T14:47:05.720","url":"https://github.com/venturedrake/laravel-crm/commit/27bd5081004913660ccb3e0181b351a2e4ded104"}]},{"url":"https://github.com/venturedrake/laravel-crm/releases/tag/2.4.0","tags":["release-notes"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:04.557Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:04.557Z","url":"https://github.com/venturedrake/laravel-crm/releases/tag/2.4.0"},{"source":"nvd","sourceId":"CVE-2026-110630","modified":"2026-10-15T14:47:05.720","url":"https://github.com/venturedrake/laravel-crm/releases/tag/2.4.0"}]},{"url":"https://github.com/venturedrake/laravel-crm","tags":["product"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:04.557Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:04.557Z","url":"https://github.com/venturedrake/laravel-crm"},{"source":"nvd","sourceId":"CVE-2026-110630","modified":"2026-10-15T14:47:05.720","url":"https://github.com/venturedrake/laravel-crm"}]},{"url":"https://www.vulncheck.com/advisories/venturedrake-laravel-crm-before-2.4.0-privilege-escalation-via-unscoped-role-assignment","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:04.557Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-14T14:17:04.557Z","url":"https://www.vulncheck.com/advisories/venturedrake-laravel-crm-before-2.4.0-privilege-escalation-via-unscoped-role-assignment"},{"source":"nvd","sourceId":"CVE-2026-110630","modified":"2026-10-15T14:47:05.720","url":"https://www.vulncheck.com/advisories/venturedrake-laravel-crm-before-2.4.0-privilege-escalation-via-unscoped-role-assignment"}]},{"source":"euvd","sourceId":"EUVD-2026-101258","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101258","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-101258","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101258"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}