CVE-2026-102156: Security Advisory 0191

Published Oct 6, 2026

Updated

Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may allow an unauthenticated network attacker, under high-complexity conditions, to inject queries against the configured directory service.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2026.2.1Patch Security Advisory 0191

Event History

Oct 6, 2026

CVE Published

via MITRE·07:40 PM

Data Sourced

via MITRE·07:40 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·08:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What security impact is indicated by the available severity data?

The severity vector indicates high confidentiality impact. It indicates no integrity or availability impact, with a changed scope.

Does exploitation require credentials or user interaction?

No credentials or user interaction are indicated. The vector identifies network access as the attack vector and marks attack complexity as high.

CVE-2026-102156: Security Advisory 0191

Remediation

Event History

Frequently Asked Questions

What security impact is indicated by the available severity data?

Does exploitation require credentials or user interaction?

Company

Resources

Contact

Frequently Asked Questions

What security impact is indicated by the available severity data?

Does exploitation require credentials or user interaction?