CVE-2026-121971

The ScopingHttpClient component in Symfony HttpClient is vulnerable to a credential disclosure flaw. The application incorrectly merges default scope options (such as auth_bearer or auth_basic ) into a request before resolving a relative URL against a base_uri . This allows a network-path referen...

CVE-2023-50443

Encrypted disks created by PRIMX CRYHOD for Windows before Q.2020.4 ANSSI qualification submission or CRYHOD for Windows before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger outbound network traffic from computers on which disks are open...

CVE-2023-50441

Encrypted folders created by PRIMX ZONECENTRAL for Windows before Q.2021.2 ANSSI qualification submission or ZONECENTRAL for Windows before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger outbound network traffic from computers on which...