CVE-2026-16071

Affects Keycloak’s LDAP storage provider. The vulnerability arises when a delegated administrator searches with a specific LDAP entry DN; due to missing validation, lookups can target users outside the configured search boundary. This may disclose account information from unauthorized directory p...

DEBIAN-CVE-2019-14861

All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the poorly named dnsserver RPC pipe provides administrative facilities to modify DNS records and zones. Samba, when acting as an AD DC, stores DNS records in LDAP. In AD, the default...