CVE-2026-123746

The Symfony Security HTTP component contains a vulnerability where AuthenticatorManager::authenticateUser() fails to execute the checkPostAuth() method of user checkers during programmatic authentication. This occurs because the method does not dispatch the security.authentication.success event, ...