CVE-2026-10284

نوع الضعف

A flaw has been found in DevaslanPHP project-management up to 2.0.0-beta1. Affected by this vulnerability is the function editComment/doDeleteComment of the file app/Filament/Resources/TicketResource/Pages/ViewTicket.php of the component Livewire Handler. Executing a manipulation can lead to improper authorization. The attack can be executed remotely. The project was informed of the problem early through an issue report but has not responded yet.

المراجع

• https://github.com/devaslanphp/project-management/
• https://github.com/devaslanphp/project-management/issues/140
• https://vuldb.com/cve/CVE-2026-10284
• https://vuldb.com/submit/825473
• https://vuldb.com/vuln/367577
• https://vuldb.com/vuln/367577/cti