opsre CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH opsre CVE published 2026-10-15

CVE-2026-111347

go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key that protects encrypted login passwords. Unauthenticated attackers who capture encrypted passwords can decrypt them offline or via the /base/decryptpwd endpoint, recovering cleartext LDAP credentials for reuse. This vulnerability allows unauthorized access to LDAP systems, emphasizing the need for immediate remediation, especially in deployme [truncated]