{"uuid": "cef773e8-6b7d-4756-a01d-d6c7dc72fa40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59270", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117168404346872818", "content": "wat\nhttps://spring.io/security/cve-2026-59270\n\nSpring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administrative credential and binds its listener to all available network interfaces.\nAn attacker who could reach the LDAP listener port could authenticate using the well-known administrative bind DN, and then read or modify entries in the in-memory directory.", "creation_timestamp": "2026-08-27T16:26:07.541643Z"}