CVE-2026-13608 — OpenLDAP SASL authentication bypass
A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attack…
Published: 2026-09-06 · CVSS: 7.4 · CVSS 3.1
A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle (MITM) attack can inject a premature or shortcut response that bypasses complete peer validation.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7