SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2026-33609

MediumCVSS 5.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.24%

15th percentile - higher than 15% of all known CVEs

Summary

Incomplete escaping of LDAP queries when running with 8bit-dns enabled allows users to perform queries of internal domain subtrees.

Risk Assessment

Users may access information from internal directory structures, potentially leading to data disclosure and domain isolation breaches.

Recommendation

Disable 8bit-dns if not required, or apply a fix that ensures complete escaping of LDAP queries.

Other vulnerabilities in LDAP

Original NVD description (English source)

Incomplete escaping of LDAP queries when running with 8bit-dns enabled allows users to perform queries of internal domain subtrees.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS