CVE-2026-49209 | symfony UX up to 2.35.x/3.0.x LiveComponent __invoke resource consumption

July 17, 2026 Yanac

A vulnerability categorized as problematic has been discovered in symfony UX up to 2.35.x/3.0.x. This issue affects the function BatchActionController::__invoke of the component LiveComponent. Such manipulation leads to resource consumption.

This vulnerability is documented as CVE-2026-49209. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More