CVE-2026-121619 | SensioLabs Symfony up to 7.4.22/8.1.10 FrameworkBundle/HttpFoundation setTrustedProxies improper authentication

November 12, 2026 Yanac

A vulnerability classified as critical was found in SensioLabs Symfony up to 7.4.22/8.1.10. This impacts the function Request::setTrustedProxies of the component FrameworkBundle/HttpFoundation. Such manipulation leads to improper authentication.

This vulnerability is listed as CVE-2026-121619. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More