NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2026-129349

CVSS: —
EPSS: —
Published: —
Modified: —

Analyze CVE-2026-129349 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

NVD CVE.org GitHub PoCs EPSS (—)

In the news

1 story

Apache Shiro before 3.0.1 accepts any password with auth caching (CVE-2026-129349)

After one successful login, DefaultLdapRealm skips the LDAP bind and accepts any later password when caching is on.

oss-security06:00 UTC · 7h agoVulnerabilityCVE-2026-129349

62