Fedora 43 : lemonldap-ng (2026-d8ffb92441)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d8ffb92441 advisory. Update to 2.23.3 Fixes CVE-2026-19349 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Fedora 44 : lemonldap-ng (2026-55e1334aed)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-55e1334aed advisory. Update to 2.23.3 Fixes CVE-2026-19349 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

CVE-2026-19349

creationtimestamp| type| source ---|---|--- 2026-08-17 17:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtcaokgnej2p 2026-08-18 10:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtdxgweemd2e...

DEBIAN-CVE-2026-19349

Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends. Before redirecting to the identity provider, extractFormIn...

UBUNTU-CVE-2026-19349

Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends. Before redirecting to the identity provider, extractFormIn...

CVE-2026-19349

Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends. Before redirecting to the identity provider, extractFormIn...

CVE-2026-19349

The Lemonldap::NG::Portal software (Perl) is vulnerable to an authentication bypass in versions 2.0.0 to 2.16.8, 2.17.0 to 2.21.4, and 2.22.0 to 2.23.2 when using GitHub or LinkedIn backends. The root cause is an obsolete positional call to getApacheSession() within extractFormInfo(), which cause...

[SECURITY] [DSA 6434-1] lemonldap-ng security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6434-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 12, 2026 https://www.debian.org/security/faq -...

Debian dsa-6434 : lemonldap-ng - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6434 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6434-1 [email protected] https://www.debian.org/securit...

Linux Distros Unpatched Vulnerability : CVE-2026-19349

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2...