CVE-2026-48736 | Symfony IpUtils::PRIVATE_SUBNETS server-side request forgery

A vulnerability categorized as critical has been discovered in Symfony. The impacted element is the function IpUtils::PRIVATE_SUBNETS. Such manipulation leads to server-side request forgery.

This vulnerability is documented as CVE-2026-48736. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.