CVE-2026-21880

MEDIUM

kanboard < 1.2.49 - LDAP Injection in Authentication Mechanism

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2026-21880. PoCs published by HUSEYNKHANLI.

AI-analyzed exploit summary The repository contains a functional Python exploit script and detailed technical writeup for CVE-2026-21880, an LDAP injection vulnerability in Kanboard. The PoC demonstrates user enumeration by injecting wildcards into LDAP search filters.

Description

Kanboard is project management software focused on Kanban methodology. Versions 1.2.48 and below have an LDAP Injection vulnerability in the LDAP authentication mechanism. User-supplied input is directly substituted into LDAP search filters without proper sanitization, allowing attackers to enumerate all LDAP users, discover sensitive user attributes, and perform targeted attacks against specific accounts. This issue is fixed in version 1.2.49.

Exploits (1)

github WORKING POC 1 stars
by HUSEYNKHANLI · pythonpoc
https://github.com/HUSEYNKHANLI/CVEs/tree/main/CVE-2026-21880

The repository contains a functional Python exploit script and detailed technical writeup for CVE-2026-21880, an LDAP injection vulnerability in Kanboard. The PoC demonstrates user enumeration by injecting wildcards into LDAP search filters.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Kanboard ≤1.2.48
No auth needed
Prerequisites: Kanboard instance with LDAP authentication enabled · LDAP server configured
devstral-2 · analyzed Feb 27, 2026 Full analysis →

References (3)

Core 3

Scores

CVSS v3 5.3
EPSS 0.0035
EPSS Percentile 26.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-200 CWE-90
Status published
Products (1)
kanboard/kanboard < 1.2.49
Published Jan 08, 2026
Tracked Since Feb 18, 2026