CVE-2026-123824 | SensioLabs Symfony up to 5.4.55/6.4.49/7.4.22/8.1.10 Config XmlUtils::parse xml external entity reference

November 6, 2026 Yanac

A vulnerability labeled as critical has been found in SensioLabs Symfony up to 5.4.55/6.4.49/7.4.22/8.1.10. This vulnerability affects the function XmlUtils::parse of the component Config. Such manipulation leads to xml external entity reference.

This vulnerability is referenced as CVE-2026-123824. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More