Lucene search
K

CVE-2026-46626: SymfonyRuntime CVE-2024-50340 Patch Bypass: Web Requests Can Still Set APP_ENV/APP_DEBUG via parse_str/SAPI Argv Mismatch

🗓️ 01 Jan 1970 00:00:00Reported by OpenJS FoundationType 
friendsofphp
 friendsofphp
🔗 github.com👁 8 Views

Patch bypass lets web requests set APP_ENV and APP_DEBUG via parse_str and argument vector mismatch.

Related
Detection
ReporterTitlePublishedViews
Family
AstraLinux
Astra Linux - уязвимость в symfony
11 Feb 202507:35
astralinux
Circl
CVE-2024-50340
6 Nov 202421:10
circl
Circl
CVE-2026-46626
20 May 202611:02
circl
CNNVD
Symfony 注入漏洞
6 Nov 202400:00
cnnvd
CVE
CVE-2024-50340
6 Nov 202421:09
cve
CVE
CVE-2026-46626
1 Jan 197000:00
cve
Cvelist
CVE-2024-50340 Ability to change environment from query in symfony/runtime
6 Nov 202421:09
cvelist
Debian
[SECURITY] [DSA 5809-1] symfony security update
11 Nov 202419:06
debian
Debian
[SECURITY] [DSA 6312-1] symfony security update
31 May 202612:26
debian
Debian
[SECURITY] [DSA 6317-1] symfony security update
1 Jun 202618:04
debian
Rows per page
Vulners
Node
symfonyruntimeRange<8.0.12

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

20 May 2026 08:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 3.17.3
EPSS0.85051
SSVC
8