9 matches found
CVE-2026-113682
Networknt light-4j from 2.1.5 before 2.4.0 contains an authentication bypass vulnerability in BasicAuthHandler that allows unauthenticated attackers to log in as LDAP/AD-delegated users. Attackers can send a Basic Authorization header with a known username and empty password, triggering an...
CVE-2026-113682
The networknt light-4j library, from version 2.1.5 before 2.4.0 , contains an authentication bypass vulnerability in the BasicAuthHandler component. The root cause allows unauthenticated attackers to log in as LDAP/AD-delegated users by sending a Basic Authorization header with a known username a...
CVE-2026-113682 Networknt light-4j 2.1.5 before 2.4.0 Authentication Bypass via Empty LDAP Password
Networknt light-4j from 2.1.5 before 2.4.0 contains an authentication bypass vulnerability in BasicAuthHandler that allows unauthenticated attackers to log in as LDAP/AD-delegated users. Attackers can send a Basic Authorization header with a known username and empty password, triggering an...
CVE-2026-113682 Networknt light-4j 2.1.5 before 2.4.0 Authentication Bypass via Empty LDAP Password
Networknt light-4j from 2.1.5 before 2.4.0 contains an authentication bypass vulnerability in BasicAuthHandler that allows unauthenticated attackers to log in as LDAP/AD-delegated users. Attackers can send a Basic Authorization header with a known username and empty password, triggering an...
EUVD-2026-105098
Networknt light-4j from 2.1.5 before 2.4.0 contains an authentication bypass vulnerability in BasicAuthHandler that allows unauthenticated attackers to log in as LDAP/AD-delegated users. Attackers can send a Basic Authorization header with a known username and empty password, triggering an...
CVE-2026-113682 Networknt light-4j 2.1.5 before 2.4.0 Authentication Bypass via Empty LDAP Password
Networknt light-4j from 2.1.5 before 2.4.0 contains an authentication bypass vulnerability in BasicAuthHandler that allows unauthenticated attackers to log in as LDAP/AD-delegated users. Attackers can send a Basic Authorization header with a known username and empty password, triggering an...
CVE-2026-113682
Networknt light-4j from 2.1.5 before 2.4.0 contains an authentication bypass vulnerability in BasicAuthHandler that allows unauthenticated attackers to log in as LDAP/AD-delegated users. Attackers can send a Basic Authorization header with a known username and empty password, triggering an...
PT-2026-118480
Name of the Vulnerable Software and Affected Versions Networknt light-4j versions 2.1.5 through 2.3.x Description An authentication bypass exists in the BasicAuthHandler function. Unauthenticated attackers can log in as LDAP/AD-delegated users by sending a Basic Authorization header containing a...
Networknt Light-4J Authorization Issue Vulnerability
In versions of networknt light-4j from 2.1.5 to 2.4.0, there is an authorization issue vulnerability. This vulnerability stems from a problem with BasicAuthHandler that allows for identity authentication bypass. Attackers can trigger an unauthenticated LDAP binding by sending a Basic Authorizatio...