Detections
Analytics
CVE-2026-58222
high
Description
Debian Linux - samba - None Ubuntu Linux - Samba AD LDAP Compare filter injection and trusted-request confusion disclose protected attributes. An ordinary authenticated domain user can bypass access checks and query confidential Active Directory attributes (such as KDS root keys) via LDAP Compare requests. Due to a filter injection flaw and trusted execution context, the LDAP Compare operation can be turned into a protected-attribute disclosure oracle.