CVE-2026-45073

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, PdoAdapter::doClear() builds a DELETE statement using a namespace derived from the caller-supplied $prefix without binding or escaping it, allowing a caller able to influence $prefix to break out of the LIKE literal and alter query semantics or deletion scope. This issue is fixed in versions 5.4.52, 6.4.40, 7.4.12, and 8.0.12.

• CWE-89

• https://github.com/symfony/symfony/commit/ec50b799d79ebe24561f29351c1efcb6da95c9b1Patch
• https://github.com/symfony/symfony/releases/tag/v5.4.52Product, Release Notes
• https://github.com/symfony/symfony/releases/tag/v6.4.40Product, Release Notes
• https://github.com/symfony/symfony/releases/tag/v7.4.12Product, Release Notes
• https://github.com/symfony/symfony/releases/tag/v8.0.12Product, Release Notes
• https://github.com/symfony/symfony/security/advisories/GHSA-6qh9-h6wf-jgqcPatch, Vendor Advisory

Published

Jul 14, 2026

Last Modified

Jul 15, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-45068Symfony is a PHP framework for web and console applications …7.5
• CVE-2026-45069Symfony is a PHP framework for web and console applications …9.1
• CVE-2026-4507A vulnerability was determined in Mindinventory MindSQL up t…6.3
• CVE-2026-45070Symfony is a PHP framework for web and console applications …6.5
• CVE-2026-45071Symfony is a PHP framework for web and console applications …7.5
• CVE-2026-45072Symfony is a PHP framework for web and console applications …5.4
• CVE-2026-45074Symfony is a PHP framework for web and console applications …8.1
• CVE-2026-45075Symfony is a PHP framework for web and console applications …8.2
• CVE-2026-45076Synapse is an open source Matrix homeserver implementation. …2.7
• CVE-2026-45077Symfony is a PHP framework for web and console applications …8.6
• CVE-2026-45078Synapse is an open source Matrix homeserver implementation. …5.5
• CVE-2026-4508A vulnerability was identified in PbootCMS up to 3.2.12. The…7.3