https://patchfirst.co/vendor/laravel/New and newly exploited Laravel CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-114509/CVE-2026-114509Wed, 21 Oct 2026 00:00:00 GMTlaravel · framework. Not in CISA KEV. EPSS 0.8% (higher than 55.8% of CVEs). CVSS 9.2 CRITICAL. Public exploit code exists. Priority 69.5 of 100.public-exploithttps://patchfirst.co/cve/CVE-2025-54068/CVE-2025-54068#kevFri, 20 Mar 2026 00:00:00 GMTLaravel · Livewire. In CISA KEV since 2026-03-20. ENISA EUVD lists it as exploited. EPSS 96.3% (higher than 99.88% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 78.7 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2024-52301/CVE-2024-52301Tue, 12 Nov 2024 00:00:00 GMTlaravel · framework. Not in CISA KEV. EPSS 44.8% (higher than 98.8% of CVEs). CVSS 8.7 HIGH. Public exploit code exists. Priority 66.5 of 100.public-exploithttps://patchfirst.co/cve/CVE-2018-15133/CVE-2018-15133#kevTue, 16 Jan 2024 00:00:00 GMTLaravel · Laravel Framework. In CISA KEV since 2024-01-16. ENISA EUVD lists it as exploited. EPSS 76.6% (higher than 99.54% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 68.6 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2021-3129/CVE-2021-3129#kevMon, 18 Sep 2023 00:00:00 GMTLaravel · Ignition. In CISA KEV since 2023-09-18, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 83.7 of 100.kevransomwarepublic-exploitT1190T1059