---
id: CVE-2026-111875
title: >-
  David-Crty Databasement Scheduled Restore SaveScheduledRestoreRequest.php
  authorization
summary: >-
  A vulnerability has been found in David-Crty Databasement up to 1.8.1.
  Affected by this vulnerability is an unknown functionality of the file
  app/Http/Requests/Api/V1/SaveScheduledRestoreRequest.php of the component
  Scheduled Restore. Su…
severity: medium
cvss: 4.7
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'
cvssSource: cna
cwe:
  - CWE-862
  - CWE-863
vendor: David-Crty
product: Databasement
affected:
  - Databasement 1.8.0
  - Databasement 1.8.1
published: '2026-10-18'
updated: '2026-10-18'
sourceUpdated: '2026-10-18T05:30:17.829Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-111875'
references:
  - url: 'https://vuldb.com/vuln/421587'
    label: >-
      VDB-421587 | David-Crty Databasement Scheduled Restore
      SaveScheduledRestoreRequest.php authorization
  - url: 'https://vuldb.com/vuln/421587/cti'
    label: 'VDB-421587 | CTI Indicators (IOB, IOC, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-111875'
    label: CVE-2026-111875 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1005220'
    label: >-
      Submit #1005220 | David-Crty/databasement databasement <=1.7.3
      Write-what-where Condition
  - url: >-
      https://github.com/David-Crty/databasement/security/advisories/GHSA-3rjj-69wh-r95f
  - url: 'https://github.com/David-Crty/databasement/releases/tag/v1.8.2'
  - url: 'https://github.com/David-Crty/databasement/'
tags:
  - cve.org
ingestedAt: '2026-10-18T06:38:27.437Z'
---

## Overview

A vulnerability has been found in David-Crty Databasement up to 1.8.1. Affected by this vulnerability is an unknown functionality of the file app/Http/Requests/Api/V1/SaveScheduledRestoreRequest.php of the component Scheduled Restore. Such manipulation of the argument schema_name leads to missing authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.8.2 addresses this issue. It is suggested to upgrade the affected component.

## Affected

- `Databasement 1.8.0`
- `Databasement 1.8.1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.