What’s Vulnerable › Products

EasyCorp EasyAdminBundle vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your EasyCorp EasyAdminBundle version is affected

Latest EasyCorp EasyAdminBundle vulnerabilities

• CVE-2026-54087 — EasyAdmin: Stored Cross-Site Scripting (XSS) via uploaded files served inline in FileField and ImageField (CVSS 7.6)
• CVE-2026-81892 — EasyAdmin custom-action dispatcher bypasses access_control on other routes (CVSS 8.1)