The Cadmos LTI application hosted at cadmos.eummena.io had Laravel debug mode enabled (APP_DEBUG=true, APP_ENV=local) in a publicly accessible environment.
CVSS 4.0CRITICAL 9.2·Network·No auth·No interaction·EPSS 0.00335·Published 2026-10-01·Fixed in 2026-09-02CWE-215