LLDAPAccountManager

Products

Exploited and recent CVEs

• CVE-2026-55167 Medium 4.2 LDAP Account Manager: WebAuthn authentication challenge is kept in the PHP session 0.2%
• CVE-2026-27895 Medium 4.3 LAM has incorrect regular expression in PDF export component that allows user to upload files of any type 0.4%
• CVE-2026-27894 High 8.8 LAM has Authenticated Local File Inclusion (LFI) in PDF export 0.4%
• CVE-2025-58174 Medium 4.6 LAM profile editor stored cross-site scripting vulnerability 0.2%
• CVE-2024-52792 Medium 6.5 Arbitrary config values override in lam 0.7%
• CVE-2024-23333 High 7.9 LAM vulnerable to Authenticated Remote Code Execution 17.8%
• CVE-2022-31085 Medium 5.5 Missing Encryption of Sensitive Data in ldap-account-manager 0.3%
• CVE-2022-31084 Critical 9.0 Unauthenticated Remote Code Execution in ldap-account-manager 2.5%
• CVE-2022-31086 Medium 6.6 Incorrect Regular Expressions in ldap-account-manager 2.3%
• CVE-2022-31087 High 7.8 Incorrect Default Permissions in ldap-account-manager 0.4%
• CVE-2022-31088 Medium 6.5 Unauthenticated LDAP Injection in ldap-account-manager 1.3%
• CVE-2022-24851 High 8.1 Stored XSS and path traversal in LDAPAccountManager/lam 1.1%