CVE-2026-1966 | YugabyteDB Anywhere prior 2024.2.6.0/2025.1.1.0/2025.2.0.0 LDAP Configuration insufficiently protected credentials

A vulnerability was found in YugabyteDB Anywhere. It has been classified as problematic. This affects an unknown part of the component LDAP Configuration Handler. The manipulation leads to insufficiently protected credentials.

This vulnerability is traded as CVE-2026-1966. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.