CVE WATCH / VULNERABILITY DETAIL
CVE-2026-102279
LOWCVSS 3.1NVD feed
Published 28 September 2026 · tracked since 29 September 2026
Description
Laravel is a web application framework. Prior to 12.69.0 and 13.30.0, Laravel exception debug pages with APP_DEBUG=true pass attacker-controlled input to a Tippy.js tooltip configured with allowHTML true, enabling DOM-based cross-site scripting when a user hovers over the tooltip. This issue is fixe
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-110199 MEDIUM 4.8
- CVE-2026-128128 HIGH 7.5
- CVE-2026-127217 MEDIUM 6.4
- CVE-2026-127216 MEDIUM 6.5
- CVE-2026-68905 HIGH 8.2
- CVE-2026-128089 HIGH 7.5
- CVE-2026-127215 HIGH 8.1
- CVE-2026-127214 HIGH 8.5
- CVE-2026-128088 LOW 2.2
- CVE-2026-128087 LOW 3.7