Is CVE-2026-105127 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-105127?

CVE-2026-105127 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-105127

Description

LaraDashboard 1.4.2 before 1.4.8 applies advanced email validation to unauthenticated forgot-password and reset-password requests, triggering DNS lookups and paid AbstractAPI verification calls. Unauthenticated attackers can submit arbitrary addresses to exhaust the verification quota, making validation fail open for all public forms, and probe domain resolution.