Medium severity5.4NVD Advisory· Published Jun 1, 2026· Updated Jun 2, 2026

CVE-2026-10284

Description

A flaw has been found in DevaslanPHP project-management up to 2.0.0-beta1. Affected by this vulnerability is the function editComment/doDeleteComment of the file app/Filament/Resources/TicketResource/Pages/ViewTicket.php of the component Livewire Handler. Executing a manipulation can lead to improper authorization. The attack can be executed remotely. The project was informed of the problem early through an issue report but has not responded yet.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

DevaslanPHP/project-managementllm-create
Range: <=2.0.0-beta1

Patches

Vulnerability mechanics

References

github.com/devaslanphp/project-management/issues/140nvd
vuldb.com/cve/CVE-2026-10284nvd
vuldb.com/submit/825473nvd
vuldb.com/vuln/367577nvd
vuldb.com/vuln/367577/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000