CVE-2026-105128 | LaraDashboard up to 1.4.7 Email Template Builder redirect_url

October 4, 2026 Yanac

A vulnerability was found in LaraDashboard up to 1.4.7 and classified as problematic. This affects the function EmailTemplateController.builder/EmailTemplateController.builderEdit of the component Email Template Builder. The manipulation of the argument redirect_url results in open redirect.

This vulnerability is reported as CVE-2026-105128. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More