← العودة للجدول
CVE-2026-81892
CVE-2026-81892 | EasyCorp EasyAdminBundle up to 4.29.15/5.5.0 Route Swapping linkToRoute routeName improper authorization
📅 2026-09-01
🟡 Medium 🔥 No VulDB Vulnerability Vulnerability

📋 الوصف الكامل

A vulnerability, which was classified as critical, was found in EasyCorp EasyAdminBundle up to 4.29.15/5.5.0. Affected is the function Action::linkToRoute/MenuItem::linkToRoute of the component Route Swapping. Executing a manipulation of the argument routeName can lead to improper authorization. This vulnerability is tracked as CVE-2026-81892. The attack can be launched remotely. No exploit exist

💻 الأنظمة المتأثرة

⚠️ نوع التهديد

Vulnerability

🔗 CVE ID

CVE-2026-81892

📡 المصدر

VulDB

✅ الحلول والتخفيف

Apply vendor security patch

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ← 🔍 Valters IT ←