CVE-2025-14894 — CVE-2025-14894
Livewire Filemanager, commonly used in Laravel applications, contains LivewireFilemanagerComponent.php, which does not perform file type and MIME validation, allowing for RCE th…
Published: 2026-01-16 · CVSS: 7.5 · CVSS 3.1
Livewire Filemanager, commonly used in Laravel applications, contains LivewireFilemanagerComponent.php, which does not perform file type and MIME validation, allowing for RCE through upload of a malicious php file that can then be executed via the /storage/ URL if a commonly performed setup process within Laravel applications has been completed.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7