CVE-2026-105128 [MEDIUM] – LaraDashboard before 1.4.8 contains an open redirect vulnerability that allows remote atta

LaraDashboard before 1.4.8 contains an open redirect vulnerability that allows remote attackers to redirect users by supplying an unvalidated redirect_url parameter to EmailTemplateController builder and builderEdit. Attackers can send crafted builder links to logged-in users with email template permissions so saving a template navigates them to attacker-controlled phishing sites.