A critical vulnerability in its embedded UnboundID LDAP server that could allow remote attackers to access and manipulate in-memory directory data using a well-known administrative bind identity. Tracked as CVE-2026-59270, the flaw affects applications that use Spring Security’s UnboundIdContainer directly or rely on Spring Boot’s embedded LDAP auto-configuration. The vulnerability was published on August 20, […]
The post Spring Security Flaw Exposes Embedded LDAP Servers to Remote Admin Access appeared first on Cyber Security News.