CVE-2026-54180 | Laravel-Backpack CRUD up to 6.8.13/7.0.37 CRUD Operations getModelWithCrudPanelQuery improper authorization

A vulnerability classified as critical was found in Laravel-Backpack CRUD up to 6.8.13/7.0.37. The affected element is the function getModelWithCrudPanelQuery of the component CRUD Operations. The manipulation results in improper authorization.

This vulnerability is reported as CVE-2026-54180. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More