CVE-2026-13608

CVE-2026-13608 affects libcurl 's SASL negotiation for LDAP (OpenLDAP) authentication . An incomplete handshake sequence can be misinterpreted as a successful cryptographic verification, allowing an attacker performing a Man-in-the-Middle (MITM) attack to inject a premature or shortcut response t...

CVE-2026-75852

ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-protocol plugin. Unauthenticated attackers can issue insert, find, update, delete, and create commands against any database by connecting to port 27017 without credentials. CVSS 9.8 (Critical)...