https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T23:15:53.591064+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2018-11407 CVE-2018-11407 2026-10-21T23:15:53.592771+00:00

An issue was discovered in the Ldap component in Symfony 2.8.x before 2.8.37, 3.3.x before 3.3.17, 3.4.x before 3.4.7, and 4.0.x before 4.0.7. It allows remote attackers to bypass authentication by logging in with a "null" password and valid username, which triggers an unauthenticated bind. NOTE: this issue exists because of an incomplete fix for CVE-2016-2403.

 https://cve.radiocsirt.org/vuln/usn-4836-1 USN-4836-1 — symfony vulnerability 2026-10-21T23:15:53.592818+00:00

Affected: Ubuntu:Pro:18.04:LTS: symfony

It was discovered that Symfony through the HttpFoundation component allowed unauthorized access on a misconfigured LDAP server. A remote attacker could use this vulnerability to gain unauthorized access.