All verified exploits

CVE-2025-54068 Property Hydration RCE via Synthesizer Smuggling

CVE-2025-54068 is a critical-severity vulnerability, listed in the CISA KEV catalog. AttackerView checks Livewire sites for it with a live exploit check.

Pentest critical Livewire CISA KEV Added cve-verified-cve-2025-54068

Is my site vulnerable to CVE-2025-54068?

Detects Laravel Livewire v3 instances (3.0.0–3.6.3) where the component property update hydration mechanism allows unauthenticated attackers to smuggle malicious synthesizers through the updates payload, triggering a GuzzleHttp\Psr7\FnStream gadget chain for arbitrary command execution without needing the APP_KEY.

Is your app exploitable through CVE-2025-54068?

Scan your domain free