PT-2026-45549 · Devaslanphp · Project-Management

Mitchell45 · Published 2026-06-01 · Updated 2026-06-01 · CVE-2026-10284

NVD

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

A flaw has been found in DevaslanPHP project-management up to 2.0.0-beta1. Affected by this vulnerability is the function editComment/doDeleteComment of the file app/Filament/Resources/TicketResource/Pages/ViewTicket.php of the component Livewire Handler. Executing a manipulation can lead to improper authorization. The attack can be executed remotely. The project was informed of the problem early through an issue report but has not responded yet.

Fix

Improper Authorization

Incorrect Privilege Assignment

Weakness Enumeration

CWE-285

CWE-266

Related Identifiers

CVE-2026-10284

Affected Products

Project-Management

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-10284 · Security Note
• https://github.com/devaslanphp/project-management/issues/140 · Note
• https://vuldb.com/vuln/367577 · Note
• https://vuldb.com/submit/825473 · Note
• https://vuldb.com/cve/CVE-2026-10284 · Note
• https://vuldb.com/vuln/367577/cti · Note
• https://github.com/devaslanphp/project-management · Note