VYPR
← All advisories
Medium severity5.3OSV Advisory· Published Jan 8, 2026· Updated Jun 17, 2026

CVE-2026-21880

CVE-2026-21880

Description

Kanboard is project management software focused on Kanban methodology. Versions 1.2.48 and below have an LDAP Injection vulnerability in the LDAP authentication mechanism. User-supplied input is directly substituted into LDAP search filters without proper sanitization, allowing attackers to enumerate all LDAP users, discover sensitive user attributes, and perform targeted attacks against specific accounts. This issue is fixed in version 1.2.49.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Kanboard/Kanboard3 versions
    cpe:2.3:a:kanboard:kanboard:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:kanboard:kanboard:*:*:*:*:*:*:*:*range: <1.2.49
    • (no CPE)range: v1.0.0, v1.0.1, v1.0.10, …
    • (no CPE)range: <=1.2.48

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.