{"id":"CVE-2026-86436","title":"Lara Dashboard before 1.3.2 fails to authorize access to the post-builder image and video upload endpoints, allowing authenticated accounts without content permissions to upload files","summary":"Lara Dashboard before 1.3.2 fails to authorize access to the post-builder image and video upload endpoints, allowing authenticated accounts without content permissions to upload files. Attackers can upload polyglot files with attacker-ch…","severity":"medium","cvss":5.4,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cwe":["CWE-862"],"vendor":"laradashboard","product":"laradashboard","affected":["laradashboard < 1.3.2"],"published":"2026-09-07","updated":"2026-09-09","sourceUpdated":"2026-09-09T15:17:18.340","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86436","references":[{"url":"https://github.com/laradashboard/laradashboard","label":"disclosure@vulncheck.com"},{"url":"https://github.com/laradashboard/laradashboard/blob/v1.3.1/app/Http/Controllers/Backend/PostController.php#L727-L741","label":"disclosure@vulncheck.com"},{"url":"https://github.com/laradashboard/laradashboard/blob/v1.3.1/routes/web.php#L243-L244","label":"disclosure@vulncheck.com"},{"url":"https://github.com/laradashboard/laradashboard/commit/738cc1a219ce459323ef1d09c3789075f1b8d2f2","label":"disclosure@vulncheck.com"},{"url":"https://github.com/laradashboard/laradashboard/releases/tag/v1.3.2","label":"disclosure@vulncheck.com"},{"url":"https://github.com/laradashboard/laradashboard/security/advisories/GHSA-hp3f-j9w2-5rqg","label":"disclosure@vulncheck.com"},{"url":"https://github.com/laradashboard/laradashboard/security/advisories/GHSA-j4mm-xcgj-vpvv","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/lara-dashboard-before-1.3.2-missing-authorization-in-post-builder-media-upload-endpoints","label":"disclosure@vulncheck.com"},{"url":"https://github.com/laradashboard/laradashboard/security/advisories/GHSA-j4mm-xcgj-vpvv","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-09T14:47:25.750770Z"},"epss":0.00529,"epssPercentile":0.42265,"ingestedAt":"2026-09-08T15:33:26.980Z","slug":"CVE-2026-86436","body":"## Overview\n\nLara Dashboard before 1.3.2 fails to authorize access to the post-builder image and video upload endpoints, allowing authenticated accounts without content permissions to upload files. Attackers can upload polyglot files with attacker-chosen extensions to the public web root and execute code if the deployment permits execution of the uploaded file type.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":42,"depthScoreParts":{"impact":29.7,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":202136,"id":"CVE-2026-86436","ts":1789400063396,"field":"exploit_available","old":"false","new":"true"},{"seq":200863,"id":"CVE-2026-86436","ts":1789397617328,"field":"exploit_available","old":"true","new":"false"},{"seq":199556,"id":"CVE-2026-86436","ts":1789395529909,"field":"exploit_available","old":"false","new":"true"},{"seq":198801,"id":"CVE-2026-86436","ts":1789392245165,"field":"exploit_available","old":"true","new":"false"},{"seq":197134,"id":"CVE-2026-86436","ts":1789384294676,"field":"exploit_available","old":"false","new":"true"},{"seq":196408,"id":"CVE-2026-86436","ts":1789383756918,"field":"exploit_available","old":"true","new":"false"},{"seq":195312,"id":"CVE-2026-86436","ts":1789380575273,"field":"exploit_available","old":"false","new":"true"},{"seq":194263,"id":"CVE-2026-86436","ts":1789378783949,"field":"exploit_available","old":"true","new":"false"},{"seq":193050,"id":"CVE-2026-86436","ts":1789376518517,"field":"exploit_available","old":"false","new":"true"},{"seq":191837,"id":"CVE-2026-86436","ts":1789373631994,"field":"exploit_available","old":"true","new":"false"},{"seq":190622,"id":"CVE-2026-86436","ts":1789369476953,"field":"exploit_available","old":"false","new":"true"},{"seq":189409,"id":"CVE-2026-86436","ts":1789368432710,"field":"exploit_available","old":"true","new":"false"},{"seq":188192,"id":"CVE-2026-86436","ts":1789365231692,"field":"exploit_available","old":"false","new":"true"},{"seq":186979,"id":"CVE-2026-86436","ts":1789363472191,"field":"exploit_available","old":"true","new":"false"},{"seq":185765,"id":"CVE-2026-86436","ts":1789361230027,"field":"exploit_available","old":"false","new":"true"},{"seq":184552,"id":"CVE-2026-86436","ts":1789358364725,"field":"exploit_available","old":"true","new":"false"},{"seq":182802,"id":"CVE-2026-86436","ts":1789354318091,"field":"exploit_available","old":"false","new":"true"},{"seq":181595,"id":"CVE-2026-86436","ts":1789353318621,"field":"exploit_available","old":"true","new":"false"},{"seq":180388,"id":"CVE-2026-86436","ts":1789350285698,"field":"exploit_available","old":"false","new":"true"},{"seq":179181,"id":"CVE-2026-86436","ts":1789348293824,"field":"exploit_available","old":"true","new":"false"},{"seq":177974,"id":"CVE-2026-86436","ts":1789346370951,"field":"exploit_available","old":"false","new":"true"},{"seq":176767,"id":"CVE-2026-86436","ts":1789343185410,"field":"exploit_available","old":"true","new":"false"},{"seq":174884,"id":"CVE-2026-86436","ts":1789334876586,"field":"exploit_available","old":"false","new":"true"},{"seq":173679,"id":"CVE-2026-86436","ts":1789333701720,"field":"exploit_available","old":"true","new":"false"},{"seq":172493,"id":"CVE-2026-86436","ts":1789331093974,"field":"exploit_available","old":"false","new":"true"},{"seq":171307,"id":"CVE-2026-86436","ts":1789328781756,"field":"exploit_available","old":"true","new":"false"},{"seq":170102,"id":"CVE-2026-86436","ts":1789327198061,"field":"exploit_available","old":"false","new":"true"},{"seq":168897,"id":"CVE-2026-86436","ts":1789323841073,"field":"exploit_available","old":"true","new":"false"},{"seq":167692,"id":"CVE-2026-86436","ts":1789319703630,"field":"exploit_available","old":"false","new":"true"},{"seq":166487,"id":"CVE-2026-86436","ts":1789318777067,"field":"exploit_available","old":"true","new":"false"},{"seq":165282,"id":"CVE-2026-86436","ts":1789315797249,"field":"exploit_available","old":"false","new":"true"},{"seq":164077,"id":"CVE-2026-86436","ts":1789313635165,"field":"exploit_available","old":"true","new":"false"},{"seq":162872,"id":"CVE-2026-86436","ts":1789311904413,"field":"exploit_available","old":"false","new":"true"},{"seq":161667,"id":"CVE-2026-86436","ts":1789308734089,"field":"exploit_available","old":"true","new":"false"},{"seq":159780,"id":"CVE-2026-86436","ts":1789300471461,"field":"exploit_available","old":"false","new":"true"},{"seq":156769,"id":"CVE-2026-86436","ts":1789294756590,"field":"exploit_available","old":"true","new":"false"},{"seq":155564,"id":"CVE-2026-86436","ts":1789292968838,"field":"exploit_available","old":"false","new":"true"},{"seq":154359,"id":"CVE-2026-86436","ts":1789289798479,"field":"exploit_available","old":"true","new":"false"},{"seq":151610,"id":"CVE-2026-86436","ts":1789277630725,"field":"exploit_available","old":"false","new":"true"},{"seq":150571,"id":"CVE-2026-86436","ts":1789276255001,"field":"exploit_available","old":"true","new":"false"},{"seq":149538,"id":"CVE-2026-86436","ts":1789273825624,"field":"exploit_available","old":"false","new":"true"},{"seq":148505,"id":"CVE-2026-86436","ts":1789271349899,"field":"exploit_available","old":"true","new":"false"},{"seq":146536,"id":"CVE-2026-86436","ts":1789269398927,"field":"exploit_available","old":"false","new":"true"},{"seq":145341,"id":"CVE-2026-86436","ts":1789266341166,"field":"exploit_available","old":"true","new":"false"},{"seq":144245,"id":"CVE-2026-86436","ts":1789262617593,"field":"exploit_available","old":"false","new":"true"},{"seq":143149,"id":"CVE-2026-86436","ts":1789261534317,"field":"exploit_available","old":"true","new":"false"},{"seq":141980,"id":"CVE-2026-86436","ts":1789258832757,"field":"exploit_available","old":"false","new":"true"},{"seq":140821,"id":"CVE-2026-86436","ts":1789256728004,"field":"exploit_available","old":"true","new":"false"},{"seq":139623,"id":"CVE-2026-86436","ts":1789254832952,"field":"exploit_available","old":"false","new":"true"},{"seq":138425,"id":"CVE-2026-86436","ts":1789251935091,"field":"exploit_available","old":"true","new":"false"}]}