https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T22:16:20.794674+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-14705 cnvd-2020-14705 2026-10-08T22:16:20.886517+00:00 cnvd-2020-14705 https://cve.radiocsirt.org/vuln/euvd-2026-58934 EUVD-2026-58934 2026-10-08T22:16:20.886556+00:00 EUVD-2026-58934 https://cve.radiocsirt.org/vuln/fkie_cve-2019-18886 fkie_cve-2019-18886 2026-10-08T22:16:20.886571+00:00

An issue was discovered in Symfony 4.2.0 to 4.2.11 and 4.3.0 to 4.3.7. The ability to enumerate users was possible due to different handling depending on whether the user existed when making unauthorized attempts to use the switch users functionality. This is related to symfony/security.

 https://cve.radiocsirt.org/vuln/ghsa-4vpc-5jx4-cfqg GHSA-4vpc-5jx4-cfqg — User enumeration leak using switch user functionality in Symfony 2026-10-08T22:16:20.886601+00:00

Affected: Packagist: symfony/security-http, Packagist: symfony/symfony

An issue was discovered in Symfony 4.2.0 to 4.2.11 and 4.3.0 to 4.3.7. The ability to enumerate users was possible due to different handling depending on whether the user existed when making unauthorized attempts to use the switch users functionality. This is related to symfony/security.

 https://cve.radiocsirt.org/vuln/gsd-2019-18886 gsd-2019-18886 2026-10-08T22:16:20.886629+00:00 gsd-2019-18886 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-18886 Withdrawn: UBUNTU-CVE-2019-18886 2026-10-08T22:16:20.886641+00:00

Withdrawn by the publisher.

Affected: Ubuntu:20.04:LTS: symfony

An issue was discovered in Symfony 4.2.0 to 4.2.11 and 4.3.0 to 4.3.7. The ability to enumerate users was possible due to different handling depending on whether the user existed when making unauthorized attempts to use the switch users functionality. This is related to symfony/security.