https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 13 Nov 2026 13:58:51 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-126240 <p>A improper neutralization of special elements used in an ldap query (&#39;ldap injection&#39;) vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an authenticated attacker to bypass authentication. Successful exploitation requires either a malicious/compromised upstream IdP, or an IdP configuration that allows the user to control the NameID (or the SAML attribute used as the username).</p> <p>A improper neutralization of special elements used in an ldap query (&#39;ldap injection&#39;) vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an authenticated attacker to bypass authentication. Successful exploitation requires either a malicious/compromised upstream IdP, or an IdP configuration that allows the user to control the NameID (or the SAML attribute used as the username).</p> https://db.gcve.eu/vuln/fkie_cve-2026-126240 https://db.gcve.eu/vuln/ghsa-hgh4-pcf2-8q3f <p>A improper neutralization of special elements used in an ldap query (&#39;ldap injection&#39;) vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an authenticated attacker to bypass authentication. Successful exploitation requires either a malicious/compromised upstream IdP, or an IdP configuration that allows the user to control the NameID (or the SAML attribute used as the username).</p> <p>A improper neutralization of special elements used in an ldap query (&#39;ldap injection&#39;) vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an authenticated attacker to bypass authentication. Successful exploitation requires either a malicious/compromised upstream IdP, or an IdP configuration that allows the user to control the NameID (or the SAML attribute used as the username).</p> https://db.gcve.eu/vuln/ghsa-hgh4-pcf2-8q3f https://db.gcve.eu/vuln/ncsc-2026-0490 NCSC-2026-0490 https://db.gcve.eu/vuln/ncsc-2026-0490 https://db.gcve.eu/vuln/wid-sec-w-2026-4519 <p>Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiOS, Fortinet FortiManager, Fortinet FortiMail, Fortinet FortiAnalyzer und Fortinet FortiAuthenticator ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsmechanismen zu umgehen, seine Berechtigungen zu erweitern, um Daten zu manipulieren und um einen Denial of Service herbezizuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiOS, Fortinet FortiManager, Fortinet FortiMail, Fortinet FortiAnalyzer und Fortinet FortiAuthenticator ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsmechanismen zu umgehen, seine Berechtigungen zu erweitern, um Daten zu manipulieren und um einen Denial of Service herbezizuführen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-4519