CVE-2026-116200 Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap()

Snipe-IT before 8.6.3 ignores the ldapstarttls return value in Ldap::connectToLdap, allowing on-path attackers to force cleartext LDAP binds. Attackers can answer the StartTLS request with a protocol error to capture service-account credentials and end-user login passwords...

CVE-2026-116200

The software Snipe-IT versions before 8.6.3 is vulnerable to an LDAP StartTLS Downgrade via the Ldap::connectToLdap() function. The root cause is that the application ignores the return value of ldap_start_tls(), which allows an on-path attacker to intercept the connection and force a cleartext L...