CVE-2026-13608

Name of the Vulnerable Software and Affected Versions libcurl (affected versions not specified)

Description A flaw in the SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker performing a Man-in-the-Middle (MITM) attack—where the attacker secretly relays and possibly alters the communication between two parties—can inject a premature or shortcut response to bypass complete peer validation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.