Ldapaccountmanager Lam vulnerabilities

• ldapaccountmanager lam LDAP Account Manager: WebAuthn authentication challenge is kept in the PHP session CVE-2026-55167 Fix available 4.2 MediumOctober 14, 2026
• ldap-account-manager ldap account manager, ldapaccountmanager lam +1 more LAM has incorrect regular expression in PDF export component that allows user to upload files of any type CVE-2026-27895 Fix available 4.3 MediumMarch 17, 2026
• ldap-account-manager ldap account manager, ldapaccountmanager lam +1 more LAM has Authenticated Local File Inclusion (LFI) in PDF export CVE-2026-27894 Fix available 8.8 HighMarch 17, 2026
• ldapaccountmanager lam LAM profile editor stored cross-site scripting vulnerability CVE-2025-58174 Fix available 4.6 MediumSeptember 16, 2025
• ldapaccountmanager lam Arbitrary config values override in lam CVE-2024-52792 Fix available 6.5 MediumDecember 17, 2024
• ldap-account-manager ldap account manager, ldapaccountmanager lam +1 more LAM vulnerable to Authenticated Remote Code Execution CVE-2024-23333 Fix available EPSS 17.8% 7.9 HighMarch 18, 2024
• ldap-account-manager ldap account manager, ldapaccountmanager lam, debian linux +2 more Missing Encryption of Sensitive Data in ldap-account-manager CVE-2022-31085 Fix available 5.5 MediumJune 27, 2022
• ldap-account-manager ldap account manager, ldapaccountmanager lam, debian linux +2 more Unauthenticated Remote Code Execution in ldap-account-manager CVE-2022-31084 Fix available 9.0 CriticalJune 27, 2022
• ldap-account-manager ldap account manager, ldapaccountmanager lam, debian linux +2 more Incorrect Regular Expressions in ldap-account-manager CVE-2022-31086 Fix available 6.6 MediumJune 27, 2022
• ldap-account-manager ldap account manager, ldapaccountmanager lam, debian linux +2 more Incorrect Default Permissions in ldap-account-manager CVE-2022-31087 Fix available 7.8 HighJune 27, 2022
• ldap-account-manager ldap account manager, ldapaccountmanager lam, debian linux +2 more Unauthenticated LDAP Injection in ldap-account-manager CVE-2022-31088 Fix available 6.5 MediumJune 27, 2022
• ldap-account-manager ldap account manager, ldapaccountmanager lam, debian linux +2 more Stored XSS and path traversal in LDAPAccountManager/lam CVE-2022-24851 Fix available 8.1 HighApril 15, 2022