Auth0 AD/LDAP Connector vulnerabilities

2 known vulnerabilities in Auth0 AD/LDAP Connector from Auth0. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Auth0 AD/LDAP Connector: Improper Control of Generation of Code

  CVE-2026-85983Sep 8, 2026Auth0

  The Auth0 AD/LDAP Connector improperly processes a configuration value during service startup. This allows a low-privileged user on the host system to modify the connector's configuration. When the service restarts, the modified configuration can lead to code

• 9.0 Critical severity

  Auth0 AD/LDAP Connector: Improper Neutralization of Input During Web Page Generation

  CVE-2026-85982Sep 8, 2026Auth0

  The Auth0 AD/LDAP Connector is vulnerable to stored Cross-Site Scripting (XSS) issues due to improper HTML encoding of data in search results and updater log content displayed in the admin panel. An authenticated user with privileges to modify directory attrib