CVE-2026-104181Published
Filament: Multi-factor authentication (app) management actions do not require password reauthentication
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-104181 · Microsoft / collected KEV context
cve-program · CVE-2026-104181
- https://github.com/filamentphp/filament/security/advisories/GHSA-7m6h-rg42-m449
- https://github.com/filamentphp/filament/pull/20522
- https://github.com/filamentphp/filament/commit/6d4dae6d7a94ce5aefd7ed4dc836acb0e6b71bb1
- https://github.com/filamentphp/filament/releases/tag/v4.13.3
- https://github.com/filamentphp/filament/releases/tag/v5.8.3
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.