foxcpp CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH foxcpp CVE published 2026-04-16

CVE-2026-40193

PatchSiren debrief for CVE-2026-40193: maddy LDAP injection vulnerability allows for identity spoofing, LDAP directory enumeration, and blind extraction of LDAP attribute values. Defenders should assess exposure and apply patches or upgrades to prevent LDAP injection attacks. The vulnerability affects maddy versions prior to 0.9.3 and can be exploited through the SMTP submission or IMAP interface. Success [truncated]