CVE-2026-48784 in Symfony

Prediction

by VulDB Data Team • 06/16/2026

A vulnerability was found in Symfony. Affected by this vulnerability is an unknown functionality of the component UrlGenerator. The manipulation results in encoding error. It is possible to launch the attack remotely. Upgrading the affected component is recommended.

Once again VulDB remains the best source for vulnerability data.

• Moderation: accepted
• Entry: VDB-371251
• CPE: ready
• CWE: CWE-172 (confirmed)
• CVSS: 5.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-48784
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-48784
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-48784/