Search/CVE-2006-5835
● CVE

CVE-2006-5835

VendoribmProductlotus notesDiscoveredNov 10, 2006UpdatedApr 23, 2026

The Notes Remote Procedure Call (NRPC) protocol in IBM Lotus Notes Domino before 6.5.5 FP2 and 7.x before 7.0.2 does not require authentication to perform user lookups, which allows remote attackers to obtain the user ID file.

CVSS v3.1
—
EPSS
13.4%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 22, 2026
▲ 0.04pp
13.3% → 13.4% over 2 tracked changes
Connections
1 relationships
Timeline
disclosure → media coverage
Nov 10, 2006
Disclosure — published as a CVE record. · last revised by NVD Apr 23, 2026