https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 15 Sep 2026 09:45:01 +0000 https://vulnerability.circl.lu/sighting/f21f14d8-3de8-4b78-a0a0-90319af3087a/export {"uuid": "f21f14d8-3de8-4b78-a0a0-90319af3087a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11748", "type": "seen", "source": "https://gist.github.com/alon710/c05d2b733514467507b538dab5375550", "content": "# CVE-2026-11748: CVE-2026-11748: Unauthenticated LDAP Injection in Central Dogma Server Authentication\n\n> **CVSS Score:** 6.9\n> **Published:** 2026-09-11\n> **Full Report:** https://cvereports.com/reports/CVE-2026-11748\n\n## Summary\nAn LDAP injection vulnerability exists in the centraldogma-server-auth-shiro module of LY Corporation Central Dogma before version 0.84.0. The search logic dynamically constructs LDAP search filters by interpolating user-provided usernames without escaping RFC 4515 metacharacters. Unauthenticated remote attackers can leverage this flaw to bypass authentication, enumerate directory hierarchies, and access unauthorized resources.\n\n## TL;DR\nUnauthenticated LDAP injection in LY Corporation Central Dogma before version 0.84.0 allows remote attackers to bypass authentication and query directory contents due to unsafe handling of RFC 4515 metacharacters in username fields.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-90\n- **Attack Vector**: Network\n- **CVSS v4.0**: 6.9 (Medium)\n- **EPSS Score**: 0.00618 (Percentile: 47.64%)\n- **Impact**: Authentication Bypass / Directory Enumeration\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- LY Corporation Central Dogma centraldogma-server-auth-shiro module\n- **Central Dogma**: < 0.84.0 (Fixed in: `0.84.0`)\n\n## Mitigation\n\n- Upgrade the Central Dogma installation to version 0.84.0 or above.\n- Implement WAF input validation rules to block the execution of LDAP control characters in authentication queries.\n- Disable unauthenticated binds on the backend LDAP/Active Directory controllers.\n- Enforce least-privilege access permissions on the directory service account utilized by the Central Dogma server.\n\n**Remediation Steps:**\n1. Identify all deployment nodes running Central Dogma versions prior to 0.84.0.\n2. Update dependencies in build.gradle or pom.xml to target centraldogma-server-auth-shiro version 0.84.0.\n3. Recompile and redeploy the Central Dogma server services.\n4. Validate the fix by attempting to log in with wildcard characters (e.g., '*' and 'admin*)(objectClass=*') to verify they are rejected or treated as literal characters.\n\n## References\n\n- [GHSA-98q5-5qh2-7w75: LDAP Injection in centraldogma-server-auth-shiro](https://github.com/line/centraldogma/security/advisories/GHSA-98q5-5qh2-7w75)\n- [Central Dogma Security Patch Commit](https://github.com/line/centraldogma/commit/f78719f33d2bde9c37d99aafe612427d3a6f43f6)\n- [CVE.org CVE-2026-11748 Detail](https://www.cve.org/CVERecord?id=CVE-2026-11748)\n- [NVD - CVE-2026-11748 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-11748)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-11748) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-12T04:32:07.906348Z"} {"uuid": "f21f14d8-3de8-4b78-a0a0-90319af3087a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11748", "type": "seen", "source": "https://gist.github.com/alon710/c05d2b733514467507b538dab5375550", "content": "# CVE-2026-11748: CVE-2026-11748: Unauthenticated LDAP Injection in Central Dogma Server Authentication\n\n> **CVSS Score:** 6.9\n> **Published:** 2026-09-11\n> **Full Report:** https://cvereports.com/reports/CVE-2026-11748\n\n## Summary\nAn LDAP injection vulnerability exists in the centraldogma-server-auth-shiro module of LY Corporation Central Dogma before version 0.84.0. The search logic dynamically constructs LDAP search filters by interpolating user-provided usernames without escaping RFC 4515 metacharacters. Unauthenticated remote attackers can leverage this flaw to bypass authentication, enumerate directory hierarchies, and access unauthorized resources.\n\n## TL;DR\nUnauthenticated LDAP injection in LY Corporation Central Dogma before version 0.84.0 allows remote attackers to bypass authentication and query directory contents due to unsafe handling of RFC 4515 metacharacters in username fields.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-90\n- **Attack Vector**: Network\n- **CVSS v4.0**: 6.9 (Medium)\n- **EPSS Score**: 0.00618 (Percentile: 47.64%)\n- **Impact**: Authentication Bypass / Directory Enumeration\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- LY Corporation Central Dogma centraldogma-server-auth-shiro module\n- **Central Dogma**: < 0.84.0 (Fixed in: `0.84.0`)\n\n## Mitigation\n\n- Upgrade the Central Dogma installation to version 0.84.0 or above.\n- Implement WAF input validation rules to block the execution of LDAP control characters in authentication queries.\n- Disable unauthenticated binds on the backend LDAP/Active Directory controllers.\n- Enforce least-privilege access permissions on the directory service account utilized by the Central Dogma server.\n\n**Remediation Steps:**\n1. Identify all deployment nodes running Central Dogma versions prior to 0.84.0.\n2. Update dependencies in build.gradle or pom.xml to target centraldogma-server-auth-shiro version 0.84.0.\n3. Recompile and redeploy the Central Dogma server services.\n4. Validate the fix by attempting to log in with wildcard characters (e.g., '*' and 'admin*)(objectClass=*') to verify they are rejected or treated as literal characters.\n\n## References\n\n- [GHSA-98q5-5qh2-7w75: LDAP Injection in centraldogma-server-auth-shiro](https://github.com/line/centraldogma/security/advisories/GHSA-98q5-5qh2-7w75)\n- [Central Dogma Security Patch Commit](https://github.com/line/centraldogma/commit/f78719f33d2bde9c37d99aafe612427d3a6f43f6)\n- [CVE.org CVE-2026-11748 Detail](https://www.cve.org/CVERecord?id=CVE-2026-11748)\n- [NVD - CVE-2026-11748 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-11748)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-11748) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-12T04:32:07.906348Z"} https://vulnerability.circl.lu/sighting/f21f14d8-3de8-4b78-a0a0-90319af3087a/export Sat, 12 Sep 2026 04:32:07 +0000 https://vulnerability.circl.lu/sighting/ac402d67-49fb-4fe8-84f7-a6c8e945b447/export {"uuid": "ac402d67-49fb-4fe8-84f7-a6c8e945b447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11748", "type": "published-proof-of-concept", "source": "https://github.com/line/centraldogma/security/advisories/GHSA-98q5-5qh2-7w75", "content": "", "creation_timestamp": "2026-09-11T22:37:28.197079Z"} {"uuid": "ac402d67-49fb-4fe8-84f7-a6c8e945b447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11748", "type": "published-proof-of-concept", "source": "https://github.com/line/centraldogma/security/advisories/GHSA-98q5-5qh2-7w75", "content": "", "creation_timestamp": "2026-09-11T22:37:28.197079Z"} https://vulnerability.circl.lu/sighting/ac402d67-49fb-4fe8-84f7-a6c8e945b447/export Fri, 11 Sep 2026 22:37:28 +0000