CVE WATCH / VULNERABILITY DETAIL
CVE-2026-109566
CRITICALCVSS 9.8NVD feed
Published 12 October 2026 · tracked since 13 October 2026
Description
Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows remote unauthenticated attackers to gain super-admin access through an AuthSeeder-created admin@laravel account with password admin. The account is seeded by the setup installer and silently re-created o
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-104935
- CVE-2026-109573 HIGH 8.1
- CVE-2026-84312 HIGH 7.1
- CVE-2026-41210 MEDIUM 6.5
- CVE-2026-84316 HIGH 8.8
- CVE-2026-84317 HIGH 8.8
- CVE-2026-84318 HIGH 8.8
- CVE-2026-84319 HIGH 8.3
- CVE-2026-84320 MEDIUM 6.3
- CVE-2026-84321 MEDIUM 5.4