CVE-2026-118266

A flaw was found in Echo. This vulnerability allows a remote attacker to bypass Cross-Site Request Forgery CSRF protections when the MethodOverride middleware is positioned before CSRF validation in the request chain. By tricking an authenticated user into submitting a crafted request that rewrit...