EUVD-2026-78835Published
Fabric CA: LDAP Injection via Unescaped Username in GetUser Filter
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-53658 · Microsoft / collected KEV context
cve-program · CVE-2026-53658
- https://github.com/hyperledger/fabric-ca/security/advisories/GHSA-xghw-p77p-3r7x
- https://github.com/hyperledger/fabric-ca/pull/501
- https://github.com/hyperledger/fabric-ca/commit/d379df823534d56dec0166a6da8f0415e3beee24
- https://github.com/hyperledger/fabric-ca/releases/tag/v1.5.21
euvd · EUVD-2026-78835
- https://github.com/hyperledger/fabric-ca/security/advisories/GHSA-xghw-p77p-3r7x
- https://github.com/hyperledger/fabric-ca/pull/501
- https://github.com/hyperledger/fabric-ca/commit/d379df823534d56dec0166a6da8f0415e3beee24
- https://github.com/hyperledger/fabric-ca/releases/tag/v1.5.21
nvd · CVE-2026-53658
- https://github.com/hyperledger/fabric-ca/commit/d379df823534d56dec0166a6da8f0415e3beee24
- https://github.com/hyperledger/fabric-ca/pull/501
- https://github.com/hyperledger/fabric-ca/releases/tag/v1.5.21
- https://github.com/hyperledger/fabric-ca/security/advisories/GHSA-xghw-p77p-3r7x
osv · GHSA-xghw-p77p-3r7x
- https://github.com/hyperledger/fabric-ca/security/advisories/GHSA-xghw-p77p-3r7x
- https://github.com/hyperledger/fabric-ca/commit/d379df823534d56dec0166a6da8f0415e3beee24
- https://github.com/hyperledger/fabric-ca
osv · GO-2026-6234
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.