Skip to content
OpenAdvisories
High · 7.5 CVE-2026-19271 EUVD-2026-66554GHSA-24r5-pqg8-wx72

Blind LDAP Injection in Sign-In Endpoint in TÜBİTAK BİLGEM's Liderahenk

Published Aug 26, 2026 · Updated Aug 26, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows LDAP Injection.

This issue affects Liderahenk: from 3.4.0 before 3.5.5.

Affected products

VendorProductAffectedFixed
TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk 3.4.0 – < 3.5.5 3.5.5

References