Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2024-55661

55
FAUCET Score

CVE-2024-55661 is a remote code execution vulnerability affecting Laravel Pulse versions prior to 1.3.1. An authenticated user with access to the Pulse dashboard can exploit a flaw in the `remember()` method within Livewire components to execute arbitrary code. This vulnerability carries a high CVSS score of 8.8, indicating a severe risk due to its network-based attack vector, low complexity, and high impact on confidentiality, integrity, and availability. While not actively exploited in the wild (no KEV listing), public exploit code is available on ExploitDB, and its EPSS score suggests a higher-than-average likelihood of exploitation.

Impacted Technologies

VendorProductVersion(s)CPE
< 1.3.1CPE matchmatch criteria
cpe:2.3:a:laravel:pulse:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 4.0

8.7HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
LOW
User Interaction
NONE
VS Confidentiality
HIGH
VS Integrity
HIGH
VS Availability
HIGH
SS Confidentiality
NONE
SS Integrity
NONE
SS Availability
NONE
Exploit Maturity
NOT_DEFINED
CvssVersion
4.0

Exploit Intelligence

EPSS Score
29.50%
Probability of exploitation in next 30 days
EPSS Percentile
98.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
ExploitDB: EDB-52319 · Jun 9, 2025
This CVE's current EPSS score of 0.2950 is in the 98th percentile among its peer group of 14,875 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

composerpatch availablevia ghsa
Product: laravel/pulseFixed in: 1.3.1
github_advisorypatch availablevia nvd_reference
View patch

Vendor Advisories (1)

composerGHSA-8vwh-pr89-4mw2high

Laravel Pulse Allows Remote Code Execution via Unprotected Query Method

Dec 13, 2024

References

github.com / laravel/pulse/commit/d1a5bf2eca36c6e3bedb4ceecd45df7d002a1ebc
Patch
github.com / laravel/pulse/security/advisories/GHSA-8vwh-pr89-4mw2
Vendor Advisory