Detections
Analytics
CVE-2026-13608
high
Description
A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle (MITM) attack can inject a premature or shortcut response that bypasses complete peer validation.
References
https://hackerone.com/reports/3822248
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-72164