{"id":"CVE-2026-110256","aliases":[],"cve":{"records":[{"id":"CVE-2026-110256","source":"VulnCheck","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-13T18:33:55.549Z","published":"2026-10-13T19:05:29.809Z","modified":"2026-10-26T18:10:38.724Z"}],"publishers":[{"name":"VulnCheck","role":"CNA","organizationId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","modified":"2026-10-13T19:05:29.809Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-26T18:10:38.724Z"}],"references":[{"url":"https://github.com/Finsys/dockhand/security/advisories/GHSA-vmm5-cjvh-7vmv","tags":["vendor-advisory"],"source":"VulnCheck"},{"url":"https://www.vulncheck.com/advisories/dockhand-before-1.0.19-username-enumeration-via-ldap-injection-in-tryldapauth","tags":["third-party-advisory"],"source":"VulnCheck"},{"url":"https://github.com/Finsys/dockhand/security/advisories/GHSA-vmm5-cjvh-7vmv","tags":["exploit"],"source":"CISA-ADP"}],"weaknesses":[{"id":"CWE-90","description":"Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')","source":"VulnCheck"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-26T18:10:32.094737Z","decisions":[{"name":"Exploitation","value":"poc"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Dockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuth","titleSource":"VulnCheck","descriptionSource":"VulnCheck","description":"Finsys Dockhand through 1.0.18 contains an LDAP injection vulnerability in the tryLdapAuth function in src/lib/server/auth.ts, which inserts the login username into the LDAP search filter without escaping wildcard characters. Unauthenticated attackers can submit incremental wildcard patterns such as 'a*' to /api/auth/login and measure response timing to enumerate valid LDAP usernames while evading per-username rate limiting.","score":6.3,"severity":"medium","published":"2026-10-13T19:05:29.809Z","modified":"2026-10-26T18:10:38.724Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Finsys","name":"dockhand","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"1.0.19","versionType":"semver"},{"version":"1.0.19","status":"unaffected","versionType":"semver"}],"defaultStatus":"unaffected","packageURL":"pkg:github/Finsys/dockhand","cpes":[],"source":"VulnCheck","url":"https://www.cve.org/CVERecord?id=CVE-2026-110256"}],"remediation":[],"references":["https://github.com/Finsys/dockhand/security/advisories/GHSA-vmm5-cjvh-7vmv","https://www.vulncheck.com/advisories/dockhand-before-1.0.19-username-enumeration-via-ldap-injection-in-tryldapauth"],"sources":[{"name":"CVE","id":"CVE-2026-110256","modified":"2026-10-26T18:10:38.724Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-110256"}],"assessments":[{"source":"VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","score":6.3},{"source":"VulnCheck","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","score":3.7}],"sourceAffected":[],"observedAt":"2026-10-29T14:29:35.549Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T10:20:31.211Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":{"text":"Dockhand before 1.0.19 has an LDAP injection vulnerability, allowing unauthenticated attackers to enumerate valid LDAP usernames via incremental wildcard patterns. The weakness is due to improper neutralization of special elements in LDAP queries. Affected versions are less than 1.0.19.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:21:12.984Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-110256"}]}}