Read the docs

venturedrake

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

venturedrake records in CISA KEV

No venturedrake vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-74124 CVE-2026-110630 · GHSA-x3cj-7rxv-cr85

Privilege escalation in VentureDrake Laravel CRM via unscoped role assignment

Priority LOW 32

VentureDrake Laravel CRM before 2.4.0 contains an incorrect authorization vulnerability in user management that allows authenticated administrators to assign unrestricted roles via Role::find.

CVSS 4.0HIGH 7.0 Network High privileges No interaction EPSS 0.00637 Published 2026-10-14 Fixed in 2.4.0 CWE-863
TI-2026-74123 CVE-2026-110629 · GHSA-h9jr-9j2x-qpfm

Missing authorization in VentureDrake Laravel CRM Livewire actions

Priority LOW 32

VentureDrake Laravel CRM before 2.4.0 contains a missing authorization vulnerability that allows authenticated users to bypass Spatie role permissions through Livewire action methods.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00574 Published 2026-10-14 Fixed in 2.4.0 CWE-862
Open these records in search →