CVE-2026-44616

The CVE-2026-44616 entry concerns Apache Zeppelin and an LDAP injection flaw in the ActiveDirectoryGroupRealm filter construction. Authenticated users can abuse unescaped input to affect LDAP search filters via the user-search endpoint, with the role-lookup path also impacted after LDAP authentic...