CVE-2026-55409Disclosure

LOWCVSS 7.6 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Filament is a collection of full-stack components for accelerated Laravel development. From 3.0.0 until 3.3.53, a disabled RichEditor field rendered its raw state without sanitizing HTML. Where the data stored in this field's state isn't sanitized already when the form state was filled, an attacker could plant malicious HTML or JavaScript and achieve XSS that executes for users who view the form. This vulnerability is fixed in 3.3.53.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://github.com/filamentphp/filament/security/advisories/GHSA-m9cv-24rx-8mv7

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud91d
Disclosure
🚨*CVE* CVE-2026-55409 Filament is a collection of full-stack components for accelerated Laravel development. From 3.0.0 until 3.3.53, a disabled RichEditor field rendered its raw state wit… https://www.cve.org/CVERecord?id=CVE-2026-55409 ----- Traducción: CVE-2026-55409 Fil… http://infoflow.cloud`
Post summary
It references CVE‑2026‑55409, detailing a flaw in Filament’s RichEditor across specific versions, but provides no proof‑of‑concept, exploit, or patch information.
1000043
88 followersView on X
CVE@CVEnew91d
Disclosure
CVE-2026-55409 Filament is a collection of full-stack components for accelerated Laravel development. From 3.0.0 until 3.3.53, a disabled RichEditor field rendered its raw state wit… https://www.cve.org/CVERecord?id=CVE-2026-55409
Post summary
The post notes CVE-2026-55409 affects Filament’s RichEditor between versions 3.0.0 and 3.3.53, explaining how a disabled field renders raw state, but provides no PoC, exploit, or mitigation details.
00000655
57.7K followersView on X

Explore more

Back to dashboard