redhat/api-ldap-client-api vulnerabilities

Latest redhat/api-ldap-client-api CVEs

Newest publication first

1. CVE-2026-103877 Apache Directory LDAP API: Unsafe loading of Java code from LDAP schema elements

   Published 2026-10-02

   Critical·CVSS 9.8 EPSS 0.47%

   Deserialization of Untrusted Data vulnerability in Apache Directory LDAP API. A rogue/compromised LDAP server (or pre-TLS MITM) can answer a client's loadSchema() subschema search with a schema object that contains a serialized Java class, allowing some potential RCE. This issue...

2. CVE-2026-103878 Apache Directory LDAP API: Injection of plaintext responses during StartTLS

   Published 2026-10-02

   High·CVSS 7.5 EPSS 0.20%

   Cleartext transmission of sensitive information vulnerability in Apache Directory LDAP API. A StartTLS extended operation started after a Search request has been sent can lead to receive data in plain text before the TLS Handshake has been completed. This issue affects Apache Dir...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.