CVE-2026-111875 | David-Crty Databasement up to 1.8.1 Scheduled Restore SaveScheduledRestoreRequest.php schema_name authorization (GHSA-3rjj-69wh-r95f)

October 17, 2026 Yanac

A vulnerability was found in David-Crty Databasement up to 1.8.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file app/Http/Requests/Api/V1/SaveScheduledRestoreRequest.php of the component Scheduled Restore. Such manipulation of the argument schema_name leads to missing authorization.

This vulnerability is documented as CVE-2026-111875. The attack can be executed remotely. Additionally, an exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More