CVE-2026-25560 - WeKan < 8.19 LDAP Authentication Filter Injection

CVE-2026-25560 - WeKan < 8.19 LDAP Authentication Filter Injection

CVE ID : CVE-2026-25560 Published : Feb. 7, 2026, 10:16 p.m. | 1 hour, 6 minutes ago Description : WeKan versions prior to 8.19 contain an LDAP filter injection vulnerability in LDAP authentication. User-supplied username input is incorporated into LDAP search filters and DN-related values without adequate escaping, allowing an attacker to manipulate LDAP queries during authentication. Severity: 8.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
Feb. 7, 2026