io.github.bkoehm:apacheds-embedded (>=0.5, <=0.6), org.apache.activemq.examples.broker:security-ldap (>=2.24.0, <=2.31.1) +68 more potentially affected by CVE-2026-35563 via org.apache.directory.api:api-ldap-client-api (>=2.0.0, <=2.1.7)

org.apache.directory.api:api-ldap-client-api MAVEN version =2.0.0, =0.5, =2.24.0, =0.1.0, =4.7.0, =2.3.0, =1.1.0, =1.1.0, =1.1.0, =3.0.0, =3.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0.am25, =2.0.0.am25, =2.0.0.am27 and more Source cves: CVE-2026-35563 Source advisory:...

DEBIAN-CVE-2026-35563

It was identified that the LDAP client implementation in version 2.1.7 does not verify if the server certificate matches the intended LDAP hostname. While the underlying code validates the certificate chain against a trusted authority, the absence of endpoint identification allows a valid...

UBUNTU-CVE-2026-35563

It was identified that the LDAP client implementation in version 2.1.7 does not verify if the server certificate matches the intended LDAP hostname. While the underlying code validates the certificate chain against a trusted authority, the absence of endpoint identification allows a valid...

CVE-2026-35563

creationtimestamp| type| source ---|---|--- 2026-06-01 05:19:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mn7dekec2u2w 2026-06-01 08:49:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn7p5irere26...

CVE-2026-35563

It was identified that the LDAP client implementation in version 2.1.7 does not verify if the server certificate matches the intended LDAP hostname. While the underlying code validates the certificate chain against a trusted authority, the absence of endpoint identification allows a valid...