CVE-2026-102156

Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may…

Risk score: 45/100
CVSS: 6.8 v3.1
Exploit chance (30 days): 0.3%
Published: 6 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is: Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may allow an unauthenticated network attacker, under high-complexity conditions, to inject queries against the configured directory service.
Affected: See advisory
Fix: Apply the vendor's security update; see the linked advisory.
Exploitation: No known exploitation

Why it is Yellow

CVSS 6.8 medium

References

https://www.arista.com/en/support/advisories-notices/security-advisory/24807-security-advisory-0191

Original description

Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may allow an unauthenticated network attacker, under high-complexity conditions, to inject queries against the configured directory service.

Last activity 6 Oct 2026. Patch Forecast updates every hour.