Known Vulnerabilities for User Ldap by Owncloud
Listed below are 1 of the newest known vulnerabilities associated with "User Ldap" by "Owncloud".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-126240 json | A improper neutralization of special elements used in an ldap query ('ldap injection') vulnerability in Fortinet FortiAuthent... | Not Provided | 2026-11-11 | 2026-11-11 |
| CVE-2026-124628 json | In affected versions of Octopus Server, incorrect validation of changes a user made to their own LDAP identity allowed them t... | Not Provided | 2026-11-12 | 2026-11-12 |
| CVE-2026-124627 json | In affected versions of Octopus Server, incorrect validation of the external identity linked to a newly registered user could... | Not Provided | 2026-11-12 | 2026-11-12 |
| CVE-2026-121023 json | Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft AxxonNet before 3.25.0 on ... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-118426 json | In affected versions of Octopus Server with the LDAP authentication provider enabled, any authenticated user could call the L... | Not Provided | 2026-10-29 | 2026-11-05 |
| CVE-2026-116239 json | In server mode pgAdmin 4 keeps an account per authentication source, so the same username can exist as, for example, an inter... | Not Provided | 2026-10-30 | 2026-11-06 |
| CVE-2026-116238 json | In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATTEMPTS failed logins (3 by default). The limit could be ... | Not Provided | 2026-10-30 | 2026-11-06 |
| CVE-2026-116200 json | Snipe-IT before 8.6.3 ignores the ldap_start_tls() return value in Ldap::connectToLdap(), allowing on-path attackers to force... | Not Provided | 2026-10-25 | 2026-11-04 |
| CVE-2026-111261 json | The Jakarta Security LDAP identity store accepts an empty password as valid if the directory server allows unauthenticated bi... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-109357 json | LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization and ad-authorization modes because usernames a... | Not Provided | 2026-10-12 | 2026-10-15 |