TI-2024-34663 CVE-2024-51758 · GHSA-4hxw-gc2q-f6f3
Exported files stored in default (`public`) filesystem if not reconfigured in filament
Priority MEDIUM 45
Filament is a collection of full-stack components for accelerated Laravel development.
filamentphp
Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
filamentphp records in CISA KEVNo filamentphp vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
14 records
TI-2026-54081 CVE-2026-77567 · GHSA-52xp-w8hr-xv3c
Filament: App-based MFA can be bypassed when recovery codes are enabled
Priority LOW 38
Filament is a collection of full-stack components for accelerated Laravel development.
TI-2025-41263 CVE-2025-67507 · GHSA-pvcv-q3q7-266g
Filament's multi-factor authentication (app) recovery codes can be used multiple times
Priority LOW 37
Filament is a collection of full-stack components for accelerated Laravel development.
TI-2026-35861 CVE-2026-48500 · GHSA-44wp-g8f4-f4v5
Filament: Unauthenticated temporary file upload on auth pages
Priority LOW 35
Filament is a collection of full-stack components for accelerated Laravel development.
TI-2026-35865 CVE-2026-48505 · GHSA-mc5j-f6wx-h9qh
Filament: Multi-factor authentication (app) recovery codes can still be used multiple times via concurrent submission
Priority LOW 34
Filament is a collection of full-stack components for accelerated Laravel development.
TI-2026-39979 CVE-2026-55409 · GHSA-m9cv-24rx-8mv7
Filament: Disabled RichEditor field state can be used for XSS
Priority LOW 33
Filament is a collection of full-stack components for accelerated Laravel development.
TI-2026-25522 CVE-2026-33080 · GHSA-vv3x-j2x5-36jc
Filament: Unvalidated Range and Values summarizer values can be used for XSS
Priority LOW 32
Filament is a collection of full-stack components for accelerated Laravel development.
TI-2026-35601 CVE-2026-48166 · GHSA-5w46-g9pq-wh6f
Filament: Timing-based user enumeration on login page
Priority LOW 30
Filament is a collection of full-stack components for accelerated Laravel development.
TI-2026-57941 CVE-2026-84306 · GHSA-r3j6-gpjw-qfjr
Filament: Multi-factor authentication (app) codes can still be used after a newer code has been used
Priority LOW 29
Filament is a collection of full-stack components for accelerated Laravel development.
TI-2026-35508 CVE-2026-48067 · GHSA-7q3w-xqjw-g3cr
Filament: Inconsistent scope enforcement for AttachAction and AssociateAction Select fields
Priority LOW 29
Filament is a collection of full-stack components for accelerated Laravel development.
TI-2026-35602 CVE-2026-48167 · GHSA-3fc8-8hp6-6jr4
Filament: Unvalidated ImageColumn and ImageEntry values can be used for XSS
Priority LOW 28
Filament is a collection of full-stack components for accelerated Laravel development.
TI-2024-31552 CVE-2024-47186 · GHSA-9h9q-qhxg-89xr
Filament has unvalidated ColorColumn and ColorEntry values that can be used for Cross-site Scripting
Priority LOW 27
Filament is a collection of full-stack components for Laravel development.
TI-2026-65776 CVE-2026-104181 · GHSA-7m6h-rg42-m449
Filament: Multi-factor authentication (app) management actions do not require password reauthentication
Priority LOW 24
Filament is a collection of full-stack components for accelerated Laravel development.
TI-2026-57942 CVE-2026-84307 · GHSA-xwpv-pqxp-5v36
Filament: Password validity disclosure for accounts denied panel access on login page
Priority LOW 18
Filament is a collection of full-stack components for accelerated Laravel development.