PT-2026-84650
CVE-2026-13608
·
تاريخ النشر
2026-09-02
·
تاريخ التحديث
2026-10-19
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
libcurl (affected versions not specified)
Description
A flaw in the SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker performing a Man-in-the-Middle (MITM) attack—where the attacker secretly relays and possibly alters the communication between two parties—can inject a premature or shortcut response to bypass complete peer validation.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾