CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

168 matches found

Rapid7 Vulnerability Database (full)•added 2026/04/21 12:00 a.m.•4 views

CVE-2026-40606: Improper Neutralization of Special Elements used in an LDAP Query

mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmproxy 12.2.1 and below, the builtin LDAP proxy authentication does not correctly sanitize the username when querying the LDAP...

4.8CVSS5.9AI score0.00257EPSS

SaveExploits1References3

Tenable Nessus•added 2026/04/21 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2026-40606

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmprox...

4.8CVSS5.9AI score0.00257EPSS

SaveExploits1References3

Snyk•added 2026/04/14 1:08 a.m.•22 views

LDAP Injection

Overview mitmproxy is an interactive, SSL/TLS-capable intercepting proxy with a console interface for HTTP/1, HTTP/2, and WebSockets. Affected versions of this package are vulnerable to LDAP Injection through the Ldap authentication handler in mitmproxy/addons/proxyauth.py. An attacker can...

8.3CVSS5.8AI score0.00257EPSS

SaveExploits1References2

Github Security Blog•added 2026/04/14 1:08 a.m.•30 views

mitmproxy has an LDAP Injection

Impact In mitmproxy 12.2.1 and below, the builtin LDAP proxy authentication does not correctly sanitize the username when querying the LDAP server. This allows a malicious client to bypass authentication. Only mitmproxy instances using the proxyauth option with LDAP are affected. This option is n...

4.8CVSS5.7AI score0.00257EPSS

SaveExploits1References4Affected Software1

OSV•added 2026/04/14 1:08 a.m.•19 views

GHSA-527G-3W9M-29HV mitmproxy has an LDAP Injection

4.8CVSS5.7AI score0.00257EPSS

SaveExploits1References4

Positive Technologies•added 2026/04/14 12:00 a.m.•23 views

PT-2026-33226

Name of the Vulnerable Software and Affected Versions mitmproxy versions prior to 12.2.2 Description The builtin LDAP proxy authentication fails to correctly sanitize the username when querying the LDAP server. This allows a malicious client to bypass authentication. This issue only affects...

4.8CVSS5.8AI score0.00257EPSS

SaveExploits1References7