CVE-2026-75879 PUBLISHED

Multiple vulnerabilities in IBM Content Navigator and FasterXML jackson-databind in IBM Content Navigator

Assigner: ibm
Reserved: 18.08.2026 Published: 08.11.2026 Updated: 08.11.2026

IBM Content Navigator 3.0.15.0, 26.0.0.0, 3.1.0.0, and 3.2.0.0 is vulnerable to LDAP injection. A remote authenticated attacker could send a specially crafted request that could allow enumeration of LDAP directory information.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS Score: 4.3

Product Status

Vendor IBM
Product Content Navigator
Versions
  • Version 3.0.15.0 is affected
  • Version 26.0.0.0 is affected
  • Version 3.1.0.0 is affected
  • Version 3.2.0.0 is affected

Solutions

IBM strongly recommends addressing the vulnerability now by upgrading.

Affected Product(s)Version(s)Remediation / FixIBM Content Navigator3.0.15.0 Apply security fix 3.0.15-IF011 https://www.ibm.com/support/fixcentral/swg/selectFixes IBM Content Navigator26.0.0.0 Apply security fix 26.0.0-IF004 https://www.ibm.com/support/fixcentral/swg/selectFixes IBM Content Navigator3.1.0.0 Apply security fix 3.1.0-IF013 https://www.ibm.com/support/fixcentral/swg/selectFixes IBM Content Navigator3.2.0.0 Apply security fix 3.2.0-IF008 https://www.ibm.com/support/fixcentral/swg/selectFixes

References