CVE WATCH / VULNERABILITY DETAIL
CVE-2026-58256
CRITICALCVSS 9.1NVD feed
Published 27 October 2026 · tracked since 28 October 2026
Description
GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an administrator can inject malicious PHP through LDAP connector configuration parameters such as `ldap_filter`, poisoning `/personnalisation/config_ldap.inc.php` and permitting remote code
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-103688 CRITICAL 9.8
- CVE-2026-84999 CRITICAL 9.8
- CVE-2026-106013 CRITICAL 9.8
- CVE-2026-118355 CRITICAL 9.6
- CVE-2026-118341 HIGH 8.8
- CVE-2026-118342 CRITICAL 9.6
- CVE-2026-118343 HIGH 8.8
- CVE-2026-118344 HIGH 8.8
- CVE-2026-118345 HIGH 8.8
- CVE-2026-118346 HIGH 8.8