CVE-2026-112288 | Krayin laravel-crm up to 2.2.6 Webhook Service isSafeEndpoint server-side request forgery

October 19, 2026 Yanac

A vulnerability marked as problematic has been reported in Krayin laravel-crm up to 2.2.6. The impacted element is the function WebhookService::isSafeEndpoint of the component Webhook Service. The manipulation leads to server-side request forgery.

This vulnerability is listed as CVE-2026-112288. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More