CVE-2026-123339 | Sensiolabs Symfony up to 5.4.55/6.4.49/7.4.22/8.1.10 RouterListener onKernelFinishRequest input validation

November 6, 2026 Yanac

A vulnerability was found in Sensiolabs Symfony up to 5.4.55/6.4.49/7.4.22/8.1.10. It has been rated as problematic. This impacts the function RouterListener::onKernelFinishRequest of the component RouterListener. This manipulation causes improper input validation.

This vulnerability is registered as CVE-2026-123339. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More