Livewire-filemanager vulnerabilities
We track 1 vulnerability in Livewire-filemanager products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 16, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Livewire-filemanager vulnerabilities
- 9.8 Critical severity
Livewire Filemanager: Unrestricted Upload of File with Dangerous Type
Livewire Filemanager, commonly used in Laravel applications, contains LivewireFilemanagerComponent.php, which does not perform file type and MIME validation, allowing for RCE through upload of a malicious php file that can then be executed via the /storage/ UR