CVE-2026-123125 | SensioLabs Symfony up to 5.4.55/6.4.49/7.4.22/8.1.10 IpValidator server-side request forgery

November 5, 2026 Yanac

A vulnerability has been found in SensioLabs Symfony up to 5.4.55/6.4.49/7.4.22/8.1.10 and classified as critical. This vulnerability affects unknown code of the component IpValidator. Performing a manipulation results in server-side request forgery.

This vulnerability is identified as CVE-2026-123125. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More