Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackCVE-2026-94052
By Nevo Evenhaim |
1 October 2026
CVE-2026-94052 – Apache MINA SSHD sshd-ldap LdapPasswordAuthenticator auth bypass
A missing check in LdapPasswordAuthenticator in Apache MINA SSHD sshd-ldap lets remote attackers bypass LDAP-backed password authentication over SSH. Affects org.apache.sshd:sshd-ldap 1.2.0–2.19.0 and 3.0.0-M1–3.0.0-M5. Upgrade to 2.20.0 or 3.0.0-M6 to mitigate.