186 matches found
CVE-2026-126777
Traccar 3.15 before 6.17.0 contains an authentication bypass vulnerability in LdapProvider.login that fails to reject empty passwords, causing LDAP binds to be performed as unauthenticated binds when LDAP authentication is enabled. Unauthenticated attackers who know a valid username can log in vi...
EUVD-2026-123771
Traccar 3.15 before 6.17.0 contains an authentication bypass vulnerability in LdapProvider.login that fails to reject empty passwords, causing LDAP binds to be performed as unauthenticated binds when LDAP authentication is enabled. Unauthenticated attackers who know a valid username can log in vi...
CVE-2026-126777
Traccar 3.15 before 6.17.0 contains an authentication bypass vulnerability in LdapProvider.login that fails to reject empty passwords, causing LDAP binds to be performed as unauthenticated binds when LDAP authentication is enabled. Unauthenticated attackers who know a valid username can log in vi...
PT-2026-145429
Name of the Vulnerable Software and Affected Versions Traccar versions 3.15 through 6.16.x Description An authentication bypass exists in the LdapProvider.login function when LDAP authentication is enabled. The system fails to reject empty passwords, which leads to LDAP binds being performed as...
CVE-2026-111261
The Jakarta Security LDAP identity store accepts an empty password as valid if the directory server allows unauthenticated binds, which some directory servers do by default. A remote attacker can then authenticate as any existing user without knowing the password. Users are recommended to upgrade...
EUVD-2026-121220
The Jakarta Security LDAP identity store accepts an empty password as valid if the directory server allows unauthenticated binds, which some directory servers do by default. A remote attacker can then authenticate as any existing user without knowing the password. Users are recommended to upgrade...
CVE-2026-111261
The Jakarta Security LDAP identity store in Apache TomEE is vulnerable to an authentication bypass due to accepting an empty password as valid when the directory server allows unauthenticated binds. A remote attacker can exploit this to authenticate as any existing user without a password. Remedi...
CVE-2026-111261 Apache TomEE: Authentication bypass with empty password in LDAP identity store
The Jakarta Security LDAP identity store accepts an empty password as valid if the directory server allows unauthenticated binds, which some directory servers do by default. A remote attacker can then authenticate as any existing user without knowing the password. Users are recommended to upgrade...
CVE-2026-111261: Apache Software Foundation Apache TomEE: The Jakarta Security LDAP identity store accepts an empty password as valid if the directory server allows…
The Jakarta Security LDAP identity store accepts an empty password as valid if the directory server allows unauthenticated binds, which some directory servers do by default. A remote attacker can then authenticate as any existing user without knowing the password. Users are recommended to upgrade...
PT-2026-141739
The Jakarta Security LDAP identity store accepts an empty password as valid if the directory server allows unauthenticated binds, which some directory servers do by default. A remote attacker can then authenticate as any existing user without knowing the password. Users are recommended to upgrade...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: drm/xe: Do not allow eviction of BOs within the same VM in an array of VM binds An array of VM binds may potentially evict other buffer objects BOs within the same VM under certain conditions, which could lead to NULL pointer...
CVE-2026-116200
Snipe-IT before 8.6.3 ignores the ldapstarttls return value in Ldap::connectToLdap, allowing on-path attackers to force cleartext LDAP binds. Attackers can answer the StartTLS request with a protocol error to capture service-account credentials and end-user login passwords...
EUVD-2026-109458
Snipe-IT before 8.6.3 ignores the ldapstarttls return value in Ldap::connectToLdap, allowing on-path attackers to force cleartext LDAP binds. Attackers can answer the StartTLS request with a protocol error to capture service-account credentials and end-user login passwords...
CVE-2026-116200 Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap()
Snipe-IT before 8.6.3 ignores the ldapstarttls return value in Ldap::connectToLdap, allowing on-path attackers to force cleartext LDAP binds. Attackers can answer the StartTLS request with a protocol error to capture service-account credentials and end-user login passwords...
CVE-2026-116200
The software Snipe-IT versions before 8.6.3 is vulnerable to an LDAP StartTLS Downgrade via the Ldap::connectToLdap() function. The root cause is that the application ignores the return value of ldap_start_tls(), which allows an on-path attacker to intercept the connection and force a cleartext L...
CVE-2026-116200 Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap()
Snipe-IT before 8.6.3 ignores the ldapstarttls return value in Ldap::connectToLdap, allowing on-path attackers to force cleartext LDAP binds. Attackers can answer the StartTLS request with a protocol error to capture service-account credentials and end-user login passwords...
PT-2026-123041
Snipe-IT before 8.6.3 ignores the ldap start tls return value in Ldap::connectToLdap, allowing on-path attackers to force cleartext LDAP binds. Attackers can answer the StartTLS request with a protocol error to capture service-account credentials and end-user login passwords...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: In isotp.bind, there is a need to check the CAN address family. A missing check was added to prevent binds that use a non-AFCAN address family. Syzbot created some code that correctly determined the appropriate size of the sockad...
EUVD-2026-43176
PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure...
CLEANSTART-2026-AY37213 Spring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administrative credential and binds its listener to all available network interfaces
Security vulnerability affects the apache-nifi-registry package. Spring Security's embedded UnboundID LDAP server UnboundIdContainer unconditionally registers an administrative credential and binds its listener to all available network interfaces...