Redhotcyber
Livewire Filemanager Vulnerability Enables RCE in Web Applications
First seen 19 Jan 2026, 18:31 UTC
•
•53.0
Export
Article Content
Browse articles
A critical vulnerability in Livewire Filemanager, tracked as CVE-2025-14894, allows unauthenticated remote code execution (RCE) on affected Laravel web applications. This flaw arises from improper file validation in the LivewireFilemanagerComponent.php component, putting numerous servers at risk. The vulnerability has been assigned CERT vulnerability note VU#650657.
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
More articles in this cluster
Continue Reading
CVE-2026-47668: Unauthenticated RCE Vulnerability in DbGate
Critical Unauthenticated RCE Vulnerability in LiteLLM Exploited in the Wild
Monsta FTP Remote Code Execution Vulnerability CVE-2025-34299 Exploited
Critical SmarterMail Vulnerability Allows Remote Code Execution
HPE OneView Software Vulnerability Enables Remote Code Execution
SAP Releases January 2026 Security Patches for Critical Vulnerabilities