Zurück zur CVE-Übersicht
CVE-2026-13608
HIGH(7.4)CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Risk Signal Score19/100 — NIEDRIG
- CVSS 7.4 — Hoch
Erwähnungen (letzte 60 Tage)
Artikel
EPSS-Score
0.6%
Exploit-Wahrscheinlichkeit (30 Tage)
CVSS Score
7.4
Technische Schwere
Beschreibung
A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle (MITM) attack can inject a premature or shortcut response that bypasses complete peer validation.
Betroffene Produkte
- cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*