A critical vulnerability in Spring Security’s embedded UnboundID LDAP server can allow remote attackers to gain administrative access to exposed in-memory LDAP directories. Tracked as CVE-2026-59270, the issue affects applications that use Spring Security’s UnboundIdContainer, either directly or through Spring Boot’s embedded LDAP auto-configuration. The flaw was published on August 20, 2026, and carries a critical […]
This article has been indexed from Cyber Security News
Read the original article: