{"action":"Upgrade com.linecorp.centraldogma:centraldogma-server-auth-shiro to 0.84.0 or later.","affected":[{"fixed":"0.84.0","introduced":"0"}],"component":"com.linecorp.centraldogma:centraldogma-server-auth-shiro","cve_ids":["CVE-2026-11748"],"ecosystem":"Maven","epss":0.00478,"exploited":false,"fixed_versions":["0.84.0"],"ghsa_id":"GHSA-98q5-5qh2-7w75","id":"tcs_01M5N8PJBGDQTCXGT8D368R6N9","modified_at":"2026-09-11T21:00:06.357484921Z","published_at":"2026-09-11T20:43:48Z","references":["https://osv.dev/vulnerability/GHSA-98q5-5qh2-7w75","https://github.com/line/centraldogma/security/advisories/GHSA-98q5-5qh2-7w75","https://nvd.nist.gov/vuln/detail/CVE-2026-11748","https://github.com/line/centraldogma"],"severity":{"label":"medium","score":6.9},"sources":[{"source":"osv","source_id":"GHSA-98q5-5qh2-7w75","url":"https://osv.dev/vulnerability/GHSA-98q5-5qh2-7w75"},{"source":"nvd","source_id":"CVE-2026-11748","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11748"}],"summary":"Central Dogma: LDAP injection in SearchFirstActiveDirectoryRealm enables authentication confusion and audit log evasion"}