THREATOPS

THREAT OPS › CVEs › CVE-2025-54068

CVE-2025-54068 — Laravel Livewire Code Injection Vulnerability

CISA KEVExploited: confirmedLaravel

Laravel Livewire contain a code injection vulnerability that could allow unauthenticated attackers to achieve remote command execution in specific scenarios.

Vulnerability details

Affected productsLivewire
KEV remediation due2026-04-03

Related reporting

March 2026 CVE Landscape: 31 High-Impact Vulnerabilities Identified, Interlock Ransomware Group Exploits Cisco FMC Zero-Dayrecordedfuture