https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T20:54:14.661994+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-14345 cnvd-2018-14345 2026-10-21T20:54:14.666335+00:00 cnvd-2018-14345 https://cve.radiocsirt.org/vuln/euvd-2026-65230 EUVD-2026-65230 2026-10-21T20:54:14.666377+00:00 EUVD-2026-65230 https://cve.radiocsirt.org/vuln/fkie_cve-2018-11407 fkie_cve-2018-11407 2026-10-21T20:54:14.666392+00:00

An issue was discovered in the Ldap component in Symfony 2.8.x before 2.8.37, 3.3.x before 3.3.17, 3.4.x before 3.4.7, and 4.0.x before 4.0.7. It allows remote attackers to bypass authentication by logging in with a "null" password and valid username, which triggers an unauthenticated bind. NOTE: this issue exists because of an incomplete fix for CVE-2016-2403.

 https://cve.radiocsirt.org/vuln/ghsa-35c5-28pg-2qg4 GHSA-35c5-28pg-2qg4 — Symfony Authentication Bypass 2026-10-21T20:54:14.666426+00:00

Affected: Packagist: symfony/security-core, Packagist: symfony/security, Packagist: symfony/symfony

An issue was discovered in the LDAP component in Symfony 2.8.x before 2.8.37, 3.3.x before 3.3.17, 3.4.x before 3.4.7, and 4.0.x before 4.0.7. It allows remote attackers to bypass authentication by logging in with a "null" password and valid username, which triggers an unauthenticated bind. **NOTE:** this issue exists because of an incomplete fix for CVE-2016-2403.

 https://cve.radiocsirt.org/vuln/gsd-2018-11407 gsd-2018-11407 2026-10-21T20:54:14.666463+00:00 gsd-2018-11407 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-11407 UBUNTU-CVE-2018-11407 2026-10-21T20:54:14.666476+00:00

Affected: Ubuntu:Pro:18.04:LTS: symfony

An issue was discovered in the Ldap component in Symfony 2.8.x before 2.8.37, 3.3.x before 3.3.17, 3.4.x before 3.4.7, and 4.0.x before 4.0.7. It allows remote attackers to bypass authentication by logging in with a "null" password and valid username, which triggers an unauthenticated bind. NOTE: this issue exists because of an incomplete fix for CVE-2016-2403.