CVE-2026-19271 — Blind LDAP Injection in Sign-In Endpoint in TÜBİTAK BİLGEM's Liderahenk

CVE-2026-19271

Blind LDAP Injection in Sign-In Endpoint in TÜBİTAK BİLGEM's Liderahenk PUBLISHED

Description (CNA)

Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows LDAP Injection. This issue affects Liderahenk: from 3.4.0 before 3.5.5.

Affected (CNA)

Vendor / product	Versions
TÜBİTAK BİLGEM Software Technologies Research Institute / Liderahenk	affected 3.4.0 before 3.5.5

CWE

CWE-90

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0916

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.