PT-2026-45722 · Yandex · Yandex Database

Published 2026-06-02 · Updated 2026-06-02 · CVE-2026-10549

Mitre

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/AU:Y

LDAP filter injection vulnerability in Yandex Database prior to 25.3.1.25 allows a remote attacker with valid LDAP credentials to bypass group membership checks resulting in unauthorized access to the database.

Fix

Weakness Enumeration

CWE-280

Related Identifiers

CVE-2026-10549

Affected Products

Yandex Database

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-10549 · Security Note
• https://ydb.tech/docs/ru/security-changelog · Note