Skip to main content

Central Dogma CVE-2026-11748

| EUVDEUVD-2026-38208 MEDIUM
LDAP Injection (CWE-90)
2026-06-22 LY-Corporation
Information Disclosure Central Dogma LDAP Code Injection
6.9
CVSS 4.0 · Vendor: LY-Corporation
Share

Severity by source

Vendor (LY-Corporation) PRIMARY
6.9 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
6.5 MEDIUM

Network-reachable login endpoint, no credentials required; limited confidentiality and integrity impact from directory enumeration and auth confusion only.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:N/SA:N

Primary rating from Vendor (LY-Corporation).

CVSS VectorVendor: LY-Corporation

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

1
Analysis Generated
Jun 22, 2026 - 06:50 vuln.today

DescriptionCVE.org

A vulnerability has been identified in centraldogma-server-auth-shiro versions prior to 0.84.0, where the SearchFirstActiveDirectoryRealm substitutes the login username into an LDAP search filter without neutralizing LDAP filter metacharacters, allowing an unauthenticated attacker to manipulate the filter to cause authentication confusion and enumerate the directory structure.

AnalysisAI

LDAP injection in Central Dogma's Apache Shiro-based authentication module exposes unauthenticated remote attackers to authentication confusion and Active Directory enumeration. The SearchFirstActiveDirectoryRealm component in centraldogma-server-auth-shiro versions prior to 0.84.0 inserts the login username directly into an LDAP search filter without escaping metacharacters, allowing filter logic manipulation. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Identify exposed Central Dogma login endpoint
Delivery
Craft username with LDAP filter metacharacters
Exploit
Submit unauthenticated login request
Execution
SearchFirstActiveDirectoryRealm builds malformed LDAP filter
Persist
Observe differential authentication responses
Impact
Enumerate AD structure and valid account names
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires that the Central Dogma deployment has explicitly configured the SearchFirstActiveDirectoryRealm as its authentication mechanism, meaning Active Directory or LDAP-backed login must be enabled - this is not the default out-of-the-box configuration and requires deliberate administrator setup. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 score of 6.9 (Medium) is driven by a fully network-accessible, zero-complexity, unauthenticated attack surface (AV:N/AC:L/AT:N/PR:N/UI:N), tempered by limited impact metrics (VC:L/VI:L/VA:N/SC:L/SI:N/SA:N). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An unauthenticated attacker targeting an internet-exposed Central Dogma instance sends a series of login requests with crafted usernames such as admin)(|(uid=* or *)(objectClass=* to rewrite the LDAP filter constructed by SearchFirstActiveDirectoryRealm. By observing differences in authentication responses, the attacker enumerates valid AD usernames, group memberships, and OU structure without holding any credentials. …
Remediation Upgrade centraldogma-server-auth-shiro to version 0.84.0 or later, which is the vendor-released patch confirmed by LY Corporation's advisory GHSA-98q5-5qh2-7w75 (https://github.com/line/centraldogma/security/advisories/GHSA-98q5-5qh2-7w75) and the EUVD entry EUVD-2026-38208. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Central Dogma

View all
CVE-2026-11746 CRITICAL
9.4 Jun 22

Cluster-wide remote code execution in LY Corporation's centraldogma-server prior to 0.84.0 occurs when ZooKeeper replica
CVE-2026-11745 HIGH
8.8 Jun 22

Man-in-the-middle attacks against LY Corporation's Central Dogma server can compromise mirrored Git repositories in vers
CVE-2021-38388 HIGH
8.8 Sep 08

Central Dogma allows privilege escalation with mirroring to the internal dogma repository that has a file managing the a
CVE-2025-11222 MEDIUM
6.1 Dec 04

Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability that allows attackers to redirect users to u
CVE-2024-1143 MEDIUM
6.1 Feb 02

Central Dogma versions prior to 0.64.1 is vulnerable to Cross-Site Scripting (XSS), which could allow for the leakage of
CVE-2019-6002 MEDIUM
6.1 Jul 26

Cross-site scripting vulnerability in Central Dogma 0.17.0 to 0.40.1 allows remote attackers to inject arbitrary web scr

Same weakness CWE-90 – LDAP Injection

View all
CVE-2016-9299 CRITICAL POC
9.8
CVE-2017-14596 CRITICAL POC
9.8
CVE-2017-8790 CRITICAL POC
9.8
CVE-2023-28853 MEDIUM POC
6.5
CVE-2026-44930 CRITICAL
9.8
CVE-2024-33868 CRITICAL
9.8
CVE-2023-6905 CRITICAL
9.8
CVE-2021-43350 CRITICAL
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2026-11748 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy