By weakness (CWE)

CWE-90: related vulnerabilities

CVEs classified under CWE-90. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

5 published vulnerabilities

• CVE-2026-13696HIGH 8.8

  HAVELSAN Inc. Liman MYS contains an LDAP injection vulnerability that allows authenticated users to manipulate LDAP queries through improperly sanitized input. An attacker with valid credentials can craft malicious LDAP queries to bypass authentication controls, extract sensitive directory information, or modify directory objects. This is a logic flaw in how the application constructs LDAP search filters, leaving it vulnerable to query manipulation attacks similar to SQL injection but targeting directory services.

• CVE-2026-4256HIGH 8.2

  PassGate, a product from PEAKUP Technology Inc., contains an LDAP injection vulnerability that allows attackers to manipulate LDAP queries without authentication. An attacker can craft malicious input to bypass authentication, extract sensitive directory data, or modify LDAP operations. The vulnerability affects all versions through 30042026 and requires no user interaction—a remote attacker can exploit it directly over the network.

• CVE-2026-45559MEDIUM 4.9

  Roxy-WI, a web management interface for HAProxy, Nginx, Apache, and Keepalived servers, contains an LDAP injection vulnerability in its user authentication module. An administrator can manipulate the username parameter to break out of the intended LDAP search filter and enumerate or extract sensitive user attributes—such as email addresses—that should remain hidden. The vulnerability exists because user input is directly concatenated into the LDAP query without proper sanitization or escaping. While exploitation requires administrative privileges, the attack is straightforward once access is obtained, making it a credential harvesting risk in multi-tenant or federated identity environments.

• CVE-2026-42568MEDIUM 4.3

  Yamcs, a mission control framework used in aerospace and satellite operations, contains a flaw in how it validates user login attempts against LDAP directories. An authenticated user can inject specially crafted characters into their username to bypass normal search restrictions, potentially gaining unauthorized access to directory information. The vulnerability requires valid credentials to exploit, limiting immediate risk, but organizations relying on LDAP-backed Yamcs deployments should update promptly.

• CVE-2026-57288LOW 3.7

  Jenkins Active Directory Plugin version 2.41.1 and earlier contains a flaw in how it processes usernames during Windows authentication. When a user logs in, the plugin builds a search query to find that user in Active Directory, but it doesn't properly sanitize the username first. This allows an attacker to insert special LDAP characters into the username field to either discover what users exist in your directory or to log in as someone else if they know that person's password—even without knowing the exact username. The vulnerability requires attackers to have network access to Jenkins and knowledge of at least one valid password, making it a limited but real risk.