Skip to content
Vulnerability intelligence

CVE-2026-4809 — Laravel Vulnerability

CVE-2026-48019 allows email header manipulation via unsanitized CRLF sequences. A second CVE compounds the risk.

Laravel 2026
What WebPulse reported · 1 analysis
Laravel's Core Email Handling Has a CRLF Injection Flaw. It's Not a Plugin.

CVE-2026-48019 allows email header manipulation via unsanitized CRLF sequences. A second CVE compounds the risk.

June 21, 2026
View CVE-2026-4809 on the NIST National Vulnerability Database →
Related vulnerabilities
CVE-2026-48019 CVE-2025-54068 CVE-2021-3129 CVE-2018-15133 CVE-2026-60137 CVE-2026-63030 CVE-2026-50549 CVE-2026-50548