Skip to content
Threat Feed
Subscribe

Product

EasyAdminBundle (< 4.29.16)

1 brief RSS
high threat

EasyAdminBundle Access Control Bypass via Route Name Manipulation

EasyAdminBundle fails to re-validate Symfony access control rules when swapping controllers for custom actions, allowing low-privilege users to bypass path-based security and access restricted routes.

EasyAdminBundle +1 TungNGo02 web-application security-bypass cve-2026-81892
1t 1c