СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-15723 Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab GitLab / GitLab · gitlab / gitlab | Критический | 8.2 | 0,43 % | PoC | 22.10.2026 | |
| CVE-2026-114420 LDAP wildcard injection exposes GINA recipient accounts SEPPmail AG / SEPPmail Secure Email Gateway (SEG) | Средний | 6.9 | 0,36 % | 04.11.2026 | ||
| CVE-2026-0636 LDAP Injection Vulnerability in LDAPStoreHelper.java Legion of the Bouncy Castle Inc. / BC-JAVA · Red Hat / Red Hat AMQ Broker 7.12.7 | Средний | 5.5 | 0,53 % | Патч | 15.04.2026 | |
| CVE-2026-47303 ASP.NET Core Elevation of Privilege Vulnerability Microsoft / .NET 10.0 runtime · Microsoft / .NET 8.0 runtime | Высокий | 8.8 | 0,84 % | Патч | 14.07.2026 | |
| CVE-2026-74241 Quay: ldap referral filter injection in quay external ldap authentication Red Hat / Red Hat OpenShift Update Service · Red Hat / Red Hat Quay 3 | Средний | 4.8 | 0,31 % | 15.08.2026 | ||
| CVE-2026-93636 Zimbra Collaboration Suite LDAP Filter Injection via Calendar Resource Attribute Name Zimbra / Zimbra Collaboration Suite · synacor / zimbra_collaboration_suite | Высокий | 4.3 | 0,34 % | PoC | 23.10.2026 | |
| CVE-2026-46619 OpenAM Authentication Bypass via MSISDN LDAP Injection OpenIdentityPlatform / OpenAM · org.openidentityplatform.openam:openam-auth-msisdn | Критический | 9.3 | 0,99 % | Патч | 15.09.2026 | |
| CVE-2026-41573 OpenAM LDAP Injection via `_queryId` Parameter OpenIdentityPlatform / OpenAM · org.openidentityplatform.openam:openam-core-rest | Высокий | 7.1 | 0,5 % | Патч | 15.09.2026 | |
| CVE-2026-34578 OPNsense has an LDAP Injection via Unsanitized Username in Authentication opnsense / core · opnsense / opnsense | Критический | 8.2 | 0,42 % | PoCПатч | 09.04.2026 | |
| CVE-2026-40193 Maddy Mail Server: LDAP Filter Injection via Unsanitized Username foxcpp / maddy · maddy_project / maddy | Критический | 8.2 | 0,42 % | PoCПатч | 16.04.2026 | |
| CVE-2026-29138 PGP Decryption Sender LDAP Injection SEPPmail / Secure Email Gateway · seppmail / secure_email_gateway | Средний | 6.3 | 0,22 % | 02.04.2026 | ||
| CVE-2026-29131 PGP Decryption Recipient LDAP Injection SEPPmail / Secure Email Gateway · seppmail / secure_email_gateway | Средний | 4.9 | 0,23 % | 02.04.2026 | ||
| CVE-2026-110256 Dockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuth Finsys / dockhand | Высокий | 6.3 | 0,37 % | PoC | 13.10.2026 | |
| CVE-2026-10759 BUG-000171040 Portal for ArcGIS has a security vulnerability Esri / Portal for ArcGIS | Средний | 5.5 | 0,25 % | 13.10.2026 | ||
| CVE-2026-44304 Lemur: LDAP Filter Injection enables post-authentication privilege escalation Netflix / lemur · lemur | Критический | 8.1 | 0,22 % | PoC | 13.05.2026 | |
| CVE-2026-101145 Eleveo Call Recording Software User Management userAddAction.do ldap injection Eleveo / Call Recording Software | Высокий | 5.3 | 0,22 % | PoC | 28.09.2026 | |
| CVE-2026-93635 Zimbra Collaboration Suite LDAP Filter Injection via Unescaped computeDn() Template Substitution Zimbra / Zimbra Collaboration Suite | Средний | 5.3 | 0,24 % | 14.10.2026 | ||
| CVE-2025-71431 Frappe before 15.86.0 LDAP Injection via Unsanitized Endpoint Parameters frappe / frappe | Средний | 6.3 | 0,25 % | 13.10.2026 | ||
| CVE-2026-89071 MOVEit Transfer LDAP injection in certificate-based authentication Progress / MOVEit Transfer | Высокий | 7.5 | 0,52 % | 14.10.2026 | ||
| CVE-2026-109357 LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Header librenms / librenms | Критический | 9.2 | 0,6 % | PoC | 12.10.2026 | |
| CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check Red Hat / Red Hat Directory Server 11.5 E4S for RHEL 8 · Red Hat / Red Hat Directory Server 11.7 E4S for RHEL 8 | Высокий | 7.5 | 0,53 % | 31.07.2026 | ||
| CVE-2026-90979 Apache Karaf: LDAP filter injection in JAAS LDAP login modules Apache Software Foundation / Apache Karaf | Высокий | 7.3 | 0,44 % | 28.09.2026 | ||
| CVE-2026-94053 Apache MINA SSHD: LDAP injection in sshd-ldap Apache Software Foundation / Apache MINA SSHD | Критический | 9.1 | 0,36 % | 30.09.2026 | ||
| CVE-2026-49469 GLPI: LDAP filter injection in user import feature glpi-project / glpi | Средний | 4.6 | 0,4 % | 25.09.2026 | ||
| CVE-2026-67223 RabbitMQ: LDAP DN injection via unescaped substitution rabbitmq / rabbitmq-server | Средний | 6.3 | 0,36 % | 25.09.2026 | ||
| CVE-2026-55770 OpenBao: LDAPi ldaputil (wrong escape func) openbao / openbao | Высокий | 6.8 | 0,53 % | PoC | 15.09.2026 | |
| CVE-2026-53658 Fabric CA: LDAP Injection via Unescaped Username in GetUser Filter hyperledger / fabric-ca | Средний | 6.3 | 0,45 % | 15.09.2026 | ||
| CVE-2026-78579 Improper Input Sanitization in Okta Access Gateway LDAP Datastore Filter Interpolation Okta / Okta Access Gateway | Средний | 6.8 | 0,33 % | 08.09.2026 | ||
| CVE-2026-80055 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5 Dell / Secure Connect Gateway 5.0 - Application · Dell / Secure Connect Gateway 5.0 - Appliance | Средний | 4.4 | 0,34 % | 09.09.2026 | ||
| CVE-2026-81205 LDAP / Active Directory Integration - Moderately critical - Information Disclosure - SA-CONTRIB-2026-115 Drupal / LDAP / Active Directory Integration | Средний | 5.3 | 0,33 % | 02.09.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.