Reverb
1 CVEs
product
Monthly
Laravel Reverb WebSocket server versions 1.6.3 and below have an insecure deserialization vulnerability enabling remote code execution on the backend server.
Redis
Laravel
RCE
Deserialization
Reverb
NVD
GitHub
CVSS 3.1
9.8
EPSS
0.5%
CVE-2026-23524
EPSS 1%
CVSS 9.8
CRITICAL
PATCH
Act Now
Laravel Reverb WebSocket server versions 1.6.3 and below have an insecure deserialization vulnerability enabling remote code execution on the backend server.
Redis
Laravel
RCE
+2
NVD
GitHub