CVE-2026-57962

MEDIUM

Denial-of-service via malicious LDAP address-book server

Title source: cna

Exploitation Summary

EIP tracks 1 public exploit for CVE-2026-57962. PoCs published by HermesNA-1.

AI-analyzed exploit summary This repository contains an auto-generated stub module for CVE-2026-57962, a vulnerability in Thunderbird's LDAP client that allows a malicious LDAP server to stash arbitrarily large attacker-supplied data. The code provides a framework for a malicious LDAP server but lacks actual exploit implementation.

Description

A malicious LDAP server, which a Thunderbird user is configured to query for address-book autocomplete, can stash arbitrarily large amounts of attacker-supplied data into the Thunderbird LDAP client until it crashes due to memory exhaustion. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1.

Exploits (1)

github STUB 1 stars

by HermesNA-1 · pythonpoc

https://github.com/HermesNA-1/SnakeSploit/tree/main/data/modules_generated/cve-2026-57962_malicious_ldap_server.py

View Code ZIP pw:eip

This repository contains an auto-generated stub module for CVE-2026-57962, a vulnerability in Thunderbird's LDAP client that allows a malicious LDAP server to stash arbitrarily large attacker-supplied data. The code provides a framework for a malicious LDAP server but lacks actual exploit implementation.

Classification

Stub 98%

Attack Type

Info Leak

Complexity

Moderate

Reliability

Theoretical

Target: Mozilla Thunderbird (LDAP client)

No auth needed

Prerequisites: Thunderbird configured to query the attacker-controlled LDAP server for address-book autocomplete · Victim interaction (e.g., triggering autocomplete)

MITRE ATT&CK

T1005 - Data from Local System T1552 - Unsecured Credentials

mistral-large-3 · analyzed Jul 09, 2026 Full analysis →