{"affected":[{"defaultStatus":"unaffected","ecosystem":"github","packageName":"laradashboard/laradashboard","product":"LaraDashboard","source":"CNA: VulnCheck","vendor":"LaraDashboard","versions":[{"lessThan":"1.4.5","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-120487","cwes":["CWE-863"],"description":"LaraDashboard before 1.4.5 contains an incorrect authorization vulnerability in SettingPolicy::manageCoreUpgrades() that allows non-Superadmin administrators with settings.edit to access Superadmin-only core-upgrade operations. Attackers can use the /admin/settings/core-upgrades backup, download, restore and upgrade actions to obtain database dumps containing password hashes and restore or upgrade the site.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.6,"severity":"high","source":"CNA: VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"},{"score":7.2,"severity":"high","source":"CNA: VulnCheck","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793629757874,"publishedAt":1793629757874,"references":[{"source":"CNA: VulnCheck","tags":["vendor-advisory"],"url":"https://github.com/laradashboard/laradashboard/security/advisories/GHSA-rjjq-v76w-8jh4"},{"source":"CNA: VulnCheck","tags":["patch"],"url":"https://github.com/laradashboard/laradashboard/commit/fdb77b898e6bb0a0df82bbf979c2bfba38a81532"},{"source":"CNA: VulnCheck","tags":["release-notes"],"url":"https://github.com/laradashboard/laradashboard/releases/tag/v1.4.5"},{"source":"CNA: VulnCheck","tags":["technical-description"],"url":"https://github.com/laradashboard/laradashboard/blob/v1.4.2/app/Policies/SettingPolicy.php#L47-L50"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/laradashboard-before-1.4.5-incorrect-authorization-via-settingpolicy-core-upgrades"}],"remediation":[],"revision":"35255cf3c0793f173db1fe6bc1457ab698520c9e6822642edfed4ea51d5b19d1","sources":[{"modifiedAt":1793629757874,"name":"CNA: VulnCheck","retrievedAt":1793632138078,"url":"https://www.cve.org/CVERecord?id=CVE-2026-120487"}],"ssvc":null,"status":"published","title":"LaraDashboard before 1.4.5 Incorrect Authorization via SettingPolicy Core Upgrades","updatedAt":1793632138078}