PT-2026-116543 · Unknown · David-Crty Databasement

Mikannse

·

CVE-2026-111875

·

Published

2026-10-18

·

Updated

2026-10-18

CVSS v2.0

5.8

Medium

VectorAV:N/AC:L/Au:M/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions David-Crty Databasement versions prior to 1.8.2
Description An issue exists in the Scheduled Restore component within the file app/Http/Requests/Api/V1/SaveScheduledRestoreRequest.php. Remote manipulation of the schema name argument leads to missing authorization.
Recommendations Upgrade to version 1.8.2.

Exploit

Fix

Missing Authorization

Incorrect Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-862CWE-863

Related Identifiers

CVE-2026-111875
GHSA-3RJJ-69WH-R95F

Affected Products

David-Crty Databasement