https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T08:31:53.461746+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-10284 CVE-2026-10284 — DevaslanPHP project-management Livewire ViewTicket.php doDeleteComment improper authorization 2026-10-06T08:31:53.477191+00:00

Affected: DevaslanPHP project-management

A flaw has been found in DevaslanPHP project-management up to 2.0.0-beta1. Affected by this vulnerability is the function editComment/doDeleteComment of the file app/Filament/Resources/TicketResource/Pages/ViewTicket.php of the component Livewire Handler. Executing a manipulation can lead to improper authorization. The attack can be executed remotely. The project was informed of the problem early through an issue report but has not responded yet.