Skip to content
VulniPulse
Sign in
Highest advisory severityLow 1 vendor · 1 advisory

CVE-2026-13608

CVE-2026-13608: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.

Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.

NVD detail CVE.org

Vendor advisory comparison

Red Hat

1 advisory
  • Advisory severityLow3.7

    Low [CVE-2026-13608] Authentication bypass in OpenLDAP SASL negotiation via Man-in-the-Middle (MITM) attack

    CVE-2026-13608Source published Source updated

    A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle (MITM) attack can inject a premature or shortcut response that bypasses complete peer validation. A flaw was found in libcurl's SASL (Simple Authentication and Security Layer) negotiation for LDAP (Lightweight Directory Access Protocol) authentication when using the OpenLDAP backend. This Low impact flaw in libcurl's SASL negotiation for LDAP authentication could allow an attacker to bypass peer validation through a Man-in-the-Middle (MITM) attack. Exploitation requires an active network attacker to inject a premature response during the authentication handshake. Red Hat severity…

    Affected products in this advisory
    • Red Hat Hardened Images
    • Red Hat Enterprise Linux 10
    • Red Hat Satellite 6
    • Red Hat package: curl
    Source-reported affected versions
    Affected-version details not available in this record.
    Source-reported fixed versions
    • curl-main-8.22.0-0.1.hum1
    • rust-main-1.98.0-1.hum1
    • RHSA-2026:63161
    • RHSA-2026:63514
    Mitigation guidance
    • To mitigate enforce strict mutual authentication and cryptographic verification of both endpoints before transmitting sensitive data. Implement robust TLS/SSL configurations with explicit certificate pinning or strict CA validation to prevent Man-in-the-Middle (MITM) attackers from intercepting, prematurely concluding, or manipulating the handshake.
    Full advisory and evidenceOpen source bulletin

Android app · Google Play

Monitor future Red Hat CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features