Is CVE-2026-87821 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-87821 being exploited in the wild.

How severe is CVE-2026-87821?

High severity, with a CVSS score of 7.1, published 9 September 2026.

Is there a fix for CVE-2026-87821?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-87821 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2026-87821?

Check whether you run Lara Dashboard at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-87821: Lara Dashboard server-side request forgery in markdown fetch

CVE-2026-87821 · Severity: high · CVSS 7.1 · Published 2026-09-09

Lara Dashboard is a Laravel-based content management system used to administer users, roles, permissions, and application settings. A vulnerability in the markdown fetching feature allows authenticated users to make the application fetch arbitrary URLs and return the response, potentially exposing internal services, databases, and cloud credentials that should not be publicly accessible.

Technologies: Lara Dashboard. Vendors: Lara Dashboard.

Quick answers

Is CVE-2026-87821 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-87821 being exploited in the wild.
How severe is CVE-2026-87821?: High severity, with a CVSS score of 7.1, published 9 September 2026.
Which products and versions are affected?: Lara Dashboard through 1.3.1.
Is there a fix for CVE-2026-87821?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-87821 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2026-87821?: Check whether you run Lara Dashboard at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The POST /api/admin/builder/markdown/fetch endpoint in Lara Dashboard through 1.3.1 is vulnerable to server-side request forgery (SSRF) due to insufficient URL validation in the MarkdownFetchService. An authenticated attacker can supply a malicious URL to retrieve responses from internal HTTP services, local metadata endpoints (e.g., AWS IAM credentials), or restricted internal resources. The vulnerability requires authentication but does not restrict redirect chains or enforce hostname validation. Responses are returned to the attacker, enabling data exfiltration from internal environments. The vulnerability affects versions up to 1.3.1.

Affected products

Lara Dashboard Lara Dashboard through 1.3.1

Timeline

2026-09-09: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.