CVE-2026-50889

EUVD-2026-36787
An input handling flaw in the HTTP refresh token process of LLDAP v0.6.2 allows attackers to cause a Denial of Service (DoS) via sending a crafted refresh-token header.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 38%
Affected Products (NVD)
VendorProductVersion
lldaplldap
0.6.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://gist.github.com/pyuysig/41937c47514ff63d66a3be98ab8e8a7d
https://gist.github.com/pyuysig/41937c47514ff63d66a3be98ab8e8a7d