CVE-2026-123746 | Sensiolabs Symfony up to 5.4.55/6.4.49/7.4.22/8.1.10 Security HTTP authenticateUser improper authorization

SecurityVulns
Yanac

A vulnerability has been found in Sensiolabs Symfony up to 5.4.55/6.4.49/7.4.22/8.1.10 and classified as problematic. Affected is the function AuthenticatorManager::authenticateUser of the component Security HTTP. The manipulation leads to improper authorization.

This vulnerability is listed as CVE-2026-123746. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More