{"id":"CVE-2026-75879","kind":"vulnerability","aliases":["CVE-2026-75879"],"related":[],"title":"IBM Content Navigator: LDAP injection lets signed-in users enumerate directory data","description":"IBM Content Navigator 3.0.15.0, 26.0.0.0, 3.1.0.0, and 3.2.0.0 is vulnerable to LDAP injection. A remote authenticated attacker could send a specially crafted request that could allow enumeration of LDAP directory information.","summary":"IBM Content Navigator versions 3.0.15.0, 26.0.0.0, 3.1.0.0 and 3.2.0.0 are vulnerable to LDAP injection. A remote attacker with a valid account can send a crafted request to list LDAP directory information.","severity":"medium","cvss":4.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["enterprise","ibm-content-navigator","ldap","vendor"],"not_affected_if":["unauthenticated-only-access"],"how_to_check":"- Check the installed Content Navigator version against the affected list: `3.0.15.0`, `26.0.0.0`, `3.1.0.0`, `3.2.0.0`.","fix":null,"status":"open","published_at":"2026-11-08T19:17:40+00:00","first_seen_at":"2026-11-08T19:22:34+00:00","triaged_at":"2026-11-08T19:23:27+00:00","updated_at":"2026-11-08T19:23:27+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-08T19:23:27Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"IBM Content Navigator: LDAP injection lets signed-in users enumerate directory data","impact":"low","summary":"IBM Content Navigator versions 3.0.15.0, 26.0.0.0, 3.1.0.0 and 3.2.0.0 are vulnerable to LDAP injection. A remote attacker with a valid account can send a crafted request to list LDAP directory information.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["ibm-content-navigator","ldap","enterprise"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Attacker enumerates LDAP directory information via crafted requests.","analyst_note":"Find the IBM security bulletin for CVE-2026-75879 to confirm the fixed version and which configurations are affected.","how_to_check":"- Check the installed Content Navigator version against the affected list: `3.0.15.0`, `26.0.0.0`, `3.1.0.0`, `3.2.0.0`.\n- unknown for other checks: the sources do not say.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["unauthenticated-only-access"],"who_is_affected":"Organizations running IBM Content Navigator on the affected versions where users can authenticate. The sources do not say which configurations expose the LDAP lookup path, so the vendor advisory is needed to confirm scope. unknown beyond that.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000733,"input_tokens":4571,"output_tokens":552,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':15A,18A '-75879':16A,19A '26.0.0.0':32B,62C '3.0.15.0':31B,61C '3.1.0.0':33B,63C '3.2.0.0':35B,65C 'account':47B 'allow':83C 'attack':43B,74C 'authent':73C 'content':2A,23B,28B,59C 'could':75C,82C 'craft':51B,79C 'cve':14A,17A 'data':13A 'directori':12A,56B,87C 'enterpris':20B 'enumer':11A,84C 'ibm':1A,22B,27B,58C 'ibm-content-navig':21B 'inform':57B,88C 'inject':5A,40B,70C 'ldap':4A,25B,39B,55B,69C,86C 'let':6A 'list':54B 'navig':3A,24B,29B,60C 'remot':42B,72C 'request':52B,80C 'send':49B,76C 'sign':8A 'signed-in':7A 'special':78C 'user':10A 'valid':46B 'vendor':26B 'version':30B 'vulner':37B,67C","nicknames":[],"mitigations":[],"who_affected":"Organizations running IBM Content Navigator on the affected versions where users can authenticate. The sources do not say which configurations expose the LDAP lookup path, so the vendor advisory is needed to confirm scope. unknown beyond that.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["enterprise","ibmcontentnavigator","ldap","medium","vendor"],"campaign_type":null,"search_a":"'-2026':15A,18A '-75879':16A,19A 'content':2A 'cve':14A,17A 'data':13A 'directori':12A 'enumer':11A 'ibm':1A 'inject':5A 'ldap':4A 'let':6A 'navig':3A 'sign':8A 'signed-in':7A 'user':10A","search_b":"'26.0.0.0':32B '3.0.15.0':31B '3.1.0.0':33B '3.2.0.0':35B 'account':47B 'attack':43B 'content':23B,28B 'craft':51B 'directori':56B 'enterpris':20B 'ibm':22B,27B 'ibm-content-navig':21B 'inform':57B 'inject':40B 'ldap':25B,39B,55B 'list':54B 'navig':24B,29B 'remot':42B 'request':52B 'send':49B 'valid':46B 'vendor':26B 'version':30B 'vulner':37B","search_c":"'26.0.0.0':62C '3.0.15.0':61C '3.1.0.0':63C '3.2.0.0':65C 'allow':83C 'attack':74C 'authent':73C 'content':59C 'could':75C,82C 'craft':79C 'directori':87C 'enumer':84C 'ibm':58C 'inform':88C 'inject':70C 'ldap':69C,86C 'navig':60C 'remot':72C 'request':80C 'send':76C 'special':78C 'vulner':67C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-08T19:17:40+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-75879","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75879","severity":null,"published_at":"2026-11-08T19:17:40+00:00","modified_at":"2026-11-08T19:17:40+00:00","first_seen_at":"2026-11-08T19:22:34+00:00","fetched_at":"2026-11-08T19:22:34+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}