CVE-2026-121949 | SensioLabs Symfony up to 6.4.49/7.4.22/8.1.10 HtmlSanitizer access control

November 5, 2026 Yanac

A vulnerability classified as problematic was found in SensioLabs Symfony up to 6.4.49/7.4.22/8.1.10. Affected by this issue is some unknown functionality of the component HtmlSanitizer. Such manipulation leads to improper access controls.

This vulnerability is traded as CVE-2026-121949. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More