Approved changes feed: RSS · Atom

cpe:2.3:a:yandex:yandex_database:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorYandex (694d67c2-958c-56da-ba5e-25307fedecef)
ProductYandex Database (b97186b4-206f-5d33-9de6-541fbf299b0c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-10549 vulnerable 2026-06-03 15:14:43.575967 Privilege escalation in Yandex Database
LDAP filter injection vulnerability in Yandex Database prior to 25.3.1.25 allows a remote attacker with valid LDAP credentials to bypass group membership checks resulting in unauthorized access to the database.
Published: 2026-06-02T08:27:06.020Z
Updated: 2026-06-02T13:30:02.360Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.