VYPR

Cadmos LTI

by Eummena.io

CVEs (1)

  • CVE-2026-102628CriOct 1, 2026
    risk 0.60cvss 9.3epss —

    The Cadmos LTI application hosted at cadmos.eummena.io had Laravel debug mode enabled (APP_DEBUG=true, APP_ENV=local) in a publicly accessible environment. An unauthenticated attacker could send a GET request and trigger an unhandled exception, causing Laravel to expose the…