PT-2026-44170 · Debian+2 · Symfony+2

Published 2026-05-27 · Updated 2026-06-15 · CVE-2026-48747

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions mailomat-mailer (affected versions not specified)

Description A Signature Algorithm Downgrade flaw exists in the mailomat-mailer component. This issue allows an attacker to perform complete Signature Forgery, which is the act of creating a fraudulent digital signature that appears to be valid.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-757

CWE-347

Related Identifiers

CVE-2026-48747

GHSA-RRJ9-5Q2J-4GVR

Affected Products

Symfony

Symfony/Mailomat-Mailer

Symfony/Symfony

References · 15

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/mailomat-mailer/CVE-2026-48747.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2026-48747.yaml · Exploit
• https://ubuntu.com/security/CVE-2026-48747 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-48747 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-48747 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-48747 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-48747 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-rrj9-5q2j-4gvr · Vendor Advisory
• https://github.com/symfony/symfony/security/advisories/GHSA-rrj9-5q2j-4gvr · Note
• https://github.com/symfony/symfony · Note
• https://github.com/symfony/symfony/commit/bdfe9fe0d94d33dfaca0bc2fe0b00b54767b0c88 · Note
• https://twitter.com/xxpw666/status/2059716560730698011 · Twitter Post
• https://symfony.com/cve-2026-48747 · Note
• https://twitter.com/dailycve/status/2066615024718688525 · Twitter Post
• https://symfony.com/blog/cve-2026-48747-mailomat-webhook-parser-reads-the-hmac-algorithm-from-the-request-signature-algorithm-downgrade · Note