onyx --cves cve-2025-54068

CVE-2025-54068

score: 3.6
cvss: —
epss: 96.3% ▼1.0
published: —
kev added: 2026-03-20
first seen: 2026-10-21

Laravel Livewire contain a code injection vulnerability that could allow unauthenticated attackers to achieve remote command execution in specific scenarios.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

2026-03-20 Added to CISA KEV
2026-10-17 First GitHub repository GustavoLopreto/cve-2025-54068-vuln-intel — Inteligencia de vulnerabilidade sobre o RCE no Laravel Livewire: CVSS v4 do zero e priorizacao com EPSS/KEV. · new repository
by 2026-10-21 Tracked by Onyx
by 2026-10-21 Nuclei template Laravel Livewire v3 - Remote Command Execution

Nuclei template

A verified check exists — you can scan for this today, and so can everyone else.

template: Laravel Livewire v3 - Remote Command Execution
github: projectdiscovery/nuclei-templates/http/cves/2025/CVE-2025-54068.yaml ↗
severity: CRIT
first seen: 2026-10-21

$ nuclei -id CVE-2025-54068 -u https://target.example

Community

1 mentions this week · GH 1

GitHub repositories 1

GH GustavoLopreto/cve-2025-54068-vuln-intel — Inteligencia de vulnerabilidade sobre o RCE no Laravel Livewire: CVSS v4 do zero e priorizacao com EPSS/KEV. new repository · 2026-10-17

Weaknesses

CWE-94