Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A weakness has been identified in mettle sendportal up to 3.0.1. Affected is the function destroy of the file app/Http/Controllers/Workspaces/WorkspaceInvitationsController.php of the component Invitation Handler. This manipulation of the argument invitation causes authorization bypass. The attack may be initiated remotely. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-7145 Authorization Bypass in Mettle Sendportal Up to 3.0.1 Invitation Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7145
Post summary
The entry announces CVE‑2026‑7145, describing it as an authorization bypass in Mettle Sendportal Invitation Handler up to version 3.0.1, but provides no proof‑of‑concept, exploit code, active exploitation, patch, or false‑positive claim.
CVE-2026-7145 A weakness has been identified in mettle sendportal up to 3.0.1. Affected is the function destroy of the file app/Http/Controllers/Workspaces/WorkspaceInvitationsContro… https://www.cve.org/CVERecord?id=CVE-2026-7145
Post summary
The post announces a newly identified weakness in Mettle SendPortal (CVE‑2026‑7145) that affects the destroy method in a specific controller file.