CVE-2026-19271

Improper Neutralization of Special Elements used in an LDAP Query 'LDAP Injection' vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows LDAP Injection. This issue affects Liderahenk: from 3.4.0 before 3.5.5...

CVE-2026-19271 Blind LDAP Injection in Sign-In Endpoint in TÜBİTAK BİLGEM's Liderahenk

Improper Neutralization of Special Elements used in an LDAP Query 'LDAP Injection' vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows LDAP Injection. This issue affects Liderahenk: from 3.4.0 before 3.5.5...

CVE-2026-19271

CVE-2026-19271 is a Blind LDAP Injection vulnerability in the Sign-In Endpoint of TÜBİTAK BİLGEM's Liderahenk , an identity management platform. The flaw stems from improper neutralization of special elements in LDAP queries, allowing an unauthenticated, network-based attacker to extract informat...

EUVD-2026-66554

Improper Neutralization of Special Elements used in an LDAP Query 'LDAP Injection' vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows LDAP Injection. This issue affects Liderahenk: from 3.4.0 before 3.5.5...

CVE-2026-75896

CVE-2026-75896 is a hard-coded LDAP credentials vulnerability in Liderahenk , a software product by TÜBİTAK BİLGEM (Software Technologies Research Institute). The embedded credentials allow an unauthenticated, remote attacker to attempt common or default usernames and passwords over the network. ...

CVE-2026-75896 Use of Hard-coded LDAP Credentials in TÜBİTAK BİLGEM's Liderahenk

Use of Hard-coded Credentials vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Try Common or Default Usernames and Passwords. This issue affects Liderahenk: before 3.5.5...

MiracleLinux 8 : 389-ds:1.4 (AXSA:2026-1661:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1661:01 advisory. 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check CVE-2026-11770 389-ds-base: 389-ds-base: NULL pointer dereferen...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: thrift (UTSA-2026-032287)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032287 advisory. Apache Log4j2 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: flink (UTSA-2026-093572)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093572 advisory. Apache Log4j2 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not...

PT-2026-82373

Name of the Vulnerable Software and Affected Versions Drupal LDAP / Active Directory Integration versions 0.0.0 through 2.2.1 Description An LDAP Injection issue exists because the module does not sufficiently sanitize user-supplied input before incorporating it into an LDAP search filter. This...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: thrift (UTSA-2026-032289)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032289 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mx4j (UTSA-2026-093038)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093038 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: HikariCP (UTSA-2026-093041)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093041 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: infinispan (UTSA-2026-093039)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093039 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...

LDAP / Active Directory Integration - Moderately critical - Information Disclosure - SA-CONTRIB-2026-115

This module enables users to authenticate using LDAP or Active Directory credentials. The module does not sufficiently sanitize user-supplied input before incorporating it into an LDAP search filter. This allows an attacker to discover additional information they should not normally be able to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: datanucleus-rdbms (UTSA-2026-093040)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093040 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: wildfly-build-tools (UTSA-2026-022372)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022372 advisory. Apache Log4j2 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: datanucleus-core (UTSA-2026-093037)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093037 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...

BIT-KEYCLOAK-2026-16071 Keycloak-services: keycloak-services: ldap entry-dn user search bypasses configured users dn boundary

A flaw was found in the LDAP storage provider of Keycloak, which is used to federate user identities from external directories. The issue occurs when a delegated administrator performs a search using a specific LDAP entry Distinguished Name DN. Due to missing validation, the system allows lookups...

Astra Linux – Vulnerability in PHP 8.1, PHP 7.3

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, and 8.3. before 8.3.14, uncontrolled long string inputs to the ldapescape function on 32-bit systems can lead to an integer overflow, resulting in an out-of-bounds write...