PT-2026-42845 · Rt · Rt

Published 2026-05-22 · Updated 2026-07-06 · CVE-2026-41076

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RT versions prior to 5.0.10 RT versions 6.0.0 through 6.0.2

Description An authentication bypass exists in installations using LDAP/AD for user authentication. Under specific LDAP server configurations, an attacker can authenticate as any LDAP-backed user without providing valid credentials.

Recommendations Update to version 5.0.10. Update to version 6.0.3. Review the LDAP server authentication policy to ensure it rejects unauthenticated bind attempts.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2026-41076

GHSA-3W28-FMCR-MJJX

USN-8506-1

Affected Products

Rt

References · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41076.json · Exploit
• https://osv.dev/vulnerability/USN-8506-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-44230 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-41076 · Security Note
• https://ubuntu.com/security/CVE-2026-41076 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-41076 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-41076 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-44231 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-41076 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-41075 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8506-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-44229 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-41076 · Security Note
• https://osv.dev/vulnerability/CVE-2026-41076 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-41073 · Vendor Advisory