networknt CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL networknt CVE published 2026-10-20

CVE-2026-113682

CVE-2026-113682 debrief: Networknt light-4j versions 2.1.5 to 2.3.7 contain a critical authentication bypass vulnerability. This vulnerability allows unauthenticated attackers to log in as LDAP/AD-delegated users by sending a Basic Authorization header with a known username and empty password, triggering an unauthenticated LDAP bind that is accepted as successful authentication. Defenders should assess ex [truncated]