<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 30 Sep 2026 17:34:08 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-0636 — LDAP Injection Vulnerability in LDAPStoreHelper.java</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-0636</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Legion of the Bouncy Castle Inc. BC-JAVA, Red Hat AMQ Broker 7.12.7, Red Hat AMQ Broker 7.13.5, Red Hat AMQ Broker 7.14.1, Red Hat Build of Apache Camel 4.14 for Quarkus 3.27, Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14, Red Hat build of Quarkus 3.20.6.SP1, Red Hat build of Quarkus 3.27.3.SP1, Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7, Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 and 35 more&lt;/p&gt;
&lt;p&gt;Improper neutralization of special elements used in an LDAP query (&amp;#39;LDAP injection&amp;#39;) vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (prov modules).&lt;/p&gt;
&lt;p&gt;This vulnerability is associated with program files LDAPStoreHelper.&lt;/p&gt;
&lt;p&gt;This issue affects BC-JAVA: from 1.74 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Legion of the Bouncy Castle Inc. BC-JAVA, Red Hat AMQ Broker 7.12.7, Red Hat AMQ Broker 7.13.5, Red Hat AMQ Broker 7.14.1, Red Hat Build of Apache Camel 4.14 for Quarkus 3.27, Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14, Red Hat build of Quarkus 3.20.6.SP1, Red Hat build of Quarkus 3.27.3.SP1, Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7, Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 and 35 more&lt;/p&gt;
&lt;p&gt;Improper neutralization of special elements used in an LDAP query (&amp;#39;LDAP injection&amp;#39;) vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (prov modules).&lt;/p&gt;
&lt;p&gt;This vulnerability is associated with program files LDAPStoreHelper.&lt;/p&gt;
&lt;p&gt;This issue affects BC-JAVA: from 1.74 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-0636</guid>
    </item>
  </channel>
</rss>
