CVE-2026-90979

LDAPCache and LDAPBackingEngine build LDAP search filters for user lookup and role lookup by textually substituting the placeholders %u, %dn, and %fqdn drawn from the login name, the resolved user DN, and its fully qualified namespace form into administrator-configured filter templates...

CVE-2026-90979 Apache Karaf: LDAP filter injection in JAAS LDAP login modules

LDAPCache and LDAPBackingEngine build LDAP search filters for user lookup and role lookup by textually substituting the placeholders %u, %dn, and %fqdn drawn from the login name, the resolved user DN, and its fully qualified namespace form into administrator-configured filter templates...

EUVD-2026-88197

LDAPCache and LDAPBackingEngine build LDAP search filters for user lookup and role lookup by textually substituting the placeholders %u, %dn, and %fqdn drawn from the login name, the resolved user DN, and its fully qualified namespace form into administrator-configured filter templates...

CVE-2026-90979 Apache Karaf: LDAP filter injection in JAAS LDAP login modules

LDAPCache and LDAPBackingEngine build LDAP search filters for user lookup and role lookup by textually substituting the placeholders %u, %dn, and %fqdn drawn from the login name, the resolved user DN, and its fully qualified namespace form into administrator-configured filter templates...

CVE-2026-90979 Apache Karaf: LDAP filter injection in JAAS LDAP login modules

LDAPCache and LDAPBackingEngine build LDAP search filters for user lookup and role lookup by textually substituting the placeholders %u, %dn, and %fqdn drawn from the login name, the resolved user DN, and its fully qualified namespace form into administrator-configured filter templates...

CVE-2026-90979

Apache Karaf is vulnerable to LDAP filter injection due to improper neutralization of special elements in the JAAS LDAP login modules . The LDAPCache and LDAPBackingEngine components build LDAP search filters by substituting placeholders (%u, %dn, %fqdn) into templates using Matcher.quoteReplacem...

CVE-2026-90979: Improper Neutralization of Special Elements used in an LDAP Query

LDAPCache and LDAPBackingEngine build LDAP search filters for user lookup and role lookup by textually substituting the placeholders %u, %dn, and %fqdn drawn from the login name, the resolved user DN, and its fully qualified namespace form into administrator-configured filter templates...

PT-2026-99838

Name of the Vulnerable Software and Affected Versions LDAPCache and LDAPBackingEngine affected versions not specified Description LDAPCache and LDAPBackingEngine build LDAP search filters for user and role lookups by substituting placeholders %u, %dn, and %fqdn into administrator-configured filte...