https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T00:36:21.777113+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-44616 CVE-2026-44616 — Apache Zeppelin: LDAP injection in ActiveDirectoryGroupRealm filter construction 2026-10-07T00:36:21.792834+00:00

Affected: Apache Software Foundation Apache Zeppelin

LDAP injection vulnerability in Apache Zeppelin. ActiveDirectoryGroupRealm constructed LDAP search filters without escaping user-controlled input, allowing an authenticated attacker to inject LDAP filter syntax through the user-search endpoint                   and potentially expose directory information. The role-lookup path was also affected after successful LDAP authentication. This issue affects Apache Zeppelin versions 0.6.0 through 0.12.0. Users are recommended to upgrade to version 0.12.1, which                   fixes this issue.