PatchSiren

SpartnerNL CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH SpartnerNL CVE published 2026-09-01

CVE-2026-84374

CVE-2026-84374 is a high-severity vulnerability in Laravel Excel, a package used for Excel exports and imports in Laravel applications. The vulnerability exists in versions 3.1.8 through 3.1.69 and allows an attacker to overwrite arbitrary files on the system by manipulating the export path. This can lead to remote code execution if an executable PHP file is overwritten.