1 matches found
CVE-2026-46745: Improper Neutralization of Special Elements used in an LDAP Query
Apache Airflow FAB Auth Manager contains an LDAP filter injection vulnerability CWE-90 that allows unauthenticated attackers to exfiltrate directory data or bypass authentication. Upgrade to apache-airflow-providers-fab 3.6.4 or later. If immediate upgrade is not possible, disable LDAP...
5.3CVSS5.9AI score0.00756EPSS
SaveExploits0References5
20