CVE-2026-19271
HighCVSS 7.5Summary
Liderahenk from version 3.4.0 before 3.5.5 has an LDAP Injection vulnerability. Improper neutralization of special elements in an LDAP query allows manipulation of queries.
Risk Assessment
An attacker can gain unauthorized access to LDAP directory data or bypass authentication mechanisms.
Recommendation
Update Liderahenk to version 3.5.5 or later. Additionally, apply input validation and sanitization.
Other vulnerabilities in Liderahenk
See all- CVE-2026-75896Critical
Use of Hard-coded Credentials vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Try Common or Default Usernames and Passwords. This issue affects Liderahenk before 3.5.5.
- CVE-2026-6508Critical
The CVE-2026-6508 vulnerability in Liderahenk software has an origin validation error that allows access to functionality not properly constrained by access control lists (ACLs). This issue affects Liderahenk from version 2.0.1 before 2.0.2.
Original NVD description (English source)
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows LDAP Injection. This issue affects Liderahenk: from 3.4.0 before 3.5.5.