Threats Tagged 'ghsa-rhjh-84m4-5qg7'

CVE-2026-59270 is a critical vulnerability in Spring Security involving the embedded UnboundID LDAP server (UnboundIdContainer). It unconditionally registers an administrative credential and binds its listener to all network interfaces, potentially allowing unauthorized access. This affects multiple versions of Spring Security including 5.7.0, 5.8.0, 6.4.0, 6.5.0, 7.0.0, and 7.1.0. The vulnerability has a high CVSS score of 9.4, indicating severe impact on confidentiality, integrity, and availability.