medium5.3
CVE-2026-10549
LDAP filter injection vulnerability in Yandex Database prior to 25.3.1.25 allows a remote attacker with valid LDAP credentials to bypass group membership check…
Impact
LDAP filter injection vulnerability in Yandex Database prior to 25.3.1.25 allows a remote attacker with valid LDAP credentials to bypass group membership checks resulting in unauthorized access to the database.
Affected products
| Product | Affected versions |
|---|---|
| Yandex Database | before 25.3.1.25 |
Versions were read from the advisory text. No structured product data has been published for this record yet.