Neutron, our AI engine, scored 97.1% on UC Berkeley's CyberGym benchmark. Learn more

Tag

#LDAP

1 articles

Deep Dive

Traccar LDAP Auth Bypass via Empty Password (CVE-2026-126777)

Traccar 3.15 through 6.16.0 accepts an empty password on LDAP logins, so an attacker who knows a username can sign in as any user, including administrators.

Ostorlab Team
Nov 12, 2026