CVE-2026-53932
⚠️ highSummary
laravel-backup-restore restores database backups made with spatie/laravel-backup. Prior to version 1.9.4, a crafted backup archive can trigger OS command injection during database restore. This issue has been patched in version 1.9.4.
CVSS Score
8.0
High
EPSS Score
0.9
Exploit Probability
Published Date
2026-09-04
First Seen: 2026-09-05
📊 Relative Risk Intelligence
This CVE is High Risk - more severe than 76.8% of all 353,175 vulnerabilities in our database.
#81,967
Top 25% most severe
Severity Percentile
Last Modified
2026-09-04
Source
NVD 🔗
CVSS Vector 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H