CVE-2026-118514 | Symfony http-foundation up to 5.4.55/6.4.49/7.4.22/8.1.10 Request Matcher SymfonyComponentHttpFoundationRequestMatcher access control

A vulnerability has been found in Symfony http-foundation up to 5.4.55/6.4.49/7.4.22/8.1.10 and classified as critical. Impacted is the function SymfonyComponentHttpFoundationRequestMatcher of the component Request Matcher. Performing a manipulation results in improper access controls.

This vulnerability is identified as CVE-2026-118514. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More