Read the docs

Livewire-filemanager

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Livewire-filemanager records in CISA KEV

No Livewire-filemanager vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Filemanager · all components

Priority MEDIUM 49

Livewire Filemanager, commonly used in Laravel applications, contains LivewireFilemanagerComponent.php, which does not perform file type and MIME validation, allowing for RCE through upload of a malicious php file that c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00621 Published 2026-01-16 Fixed in 1.0 CWE-434
Open these records in search →