CVE-2026-25560 — WeKan < 8.19 LDAP Authentication Filter Injection
WeKan versions prior to 8.19 contain an LDAP filter injection vulnerability in LDAP authentication. User-supplied username input is incorporated into LDAP search filters and DN-…
Published: 2026-02-07 · CVSS: 8.7 · CVSS 4.0
WeKan versions prior to 8.19 contain an LDAP filter injection vulnerability in LDAP authentication. User-supplied username input is incorporated into LDAP search filters and DN-related values without adequate escaping, allowing an attacker to manipulate LDAP queries during authentication.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7