Threats tagged 'ghsa-hgh4-pcf2-8q3f'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.2	CVE-2026-126240A improper neutralization of special elements used in an ldap query ('ldap injection') vulnerability in Fortinet High8.22026-11-12GCVE DatabaseCVE-2026-126240 CVE-2026-126240 is an LDAP injection vulnerability in Fortinet FortiAuthenticator versions 6.6.0 through 6.6.10 and 8.0.0 through 8.0.3. It allows an authenticated attacker to bypass authentication if the attacker can control the NameID or SAML attribute used as the username, typically via a malicious or compromised upstream Identity Provider (IdP) or an IdP configuration that permits such control. Report on CVE-2026-126240 Vulnerability CWE-90 #ghsa-hgh4-pcf2-8q3f	GCVE Database	2026-11-12

Page 1 of 1