CVE ID :CVE-2026-49268 Published : June 17, 2026, 1:07 p.m. | 2 hours, 1 minute ago Description :A remote attacker can inject LDAP special characters into the Distinguished Name (DN) construction in DefaultLdapRealm class. User-supplied username input is directly concatenated into the LDAP DN...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-49268 - Apache Shiro: LDAP DN Injection in DefaultLdapRealm

VERWANDTEARTIKEL

27-Year-Old OpenBSD Vulnerability Allows Attackers to Bypass PAP Authentication Entirely

USN-8442-1: kitty vulnerabilities

U.S. CISA adds Widget Factory Joomla Content Editor flaw to its Known Exploited Vulnerabilities catalog

CVE-2026-53874 - picklescan - Arbitrary Code Execution via Obfuscated eval Call

CVE-2026-53872 - picklescan - Arbitrary File Read via Unsafe Pickle Deserialization

CVE-2026-53873 - picklescan - Arbitrary Code Execution via profile.run() Blocklist Bypass