CVE-2026-55167 LDAP Account Manager: WebAuthn authentication challenge is kept in the PHP session

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. Prior to 9.6, installations with WebAuthn two-factor authentication leave the challenge in the same PHP session after the authentication response is processed. A user who...

CVE-2026-55167

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. Prior to 9.6, installations with WebAuthn two-factor authentication leave the challenge in the same PHP session after the authentication response is processed. A user who...

EUVD-2026-101595

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. Prior to 9.6, installations with WebAuthn two-factor authentication leave the challenge in the same PHP session after the authentication response is processed. A user who...

CVE-2026-55167

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. Prior to 9.6, installations with WebAuthn two-factor authentication leave the challenge in the same PHP session after the authentication response is processed. A user who...

CVE-2026-55167 LDAP Account Manager: WebAuthn authentication challenge is kept in the PHP session

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. Prior to 9.6, installations with WebAuthn two-factor authentication leave the challenge in the same PHP session after the authentication response is processed. A user who...

CVE-2026-85714

The Stirling-PDF web application is vulnerable to Remote Code Execution (RCE) in versions prior to 2.13.2 . An authenticated administrator using the default H2 database can upload a crafted SQL file via the POST /api/v1/database/import-database endpoint. The DatabaseService.validateSqlContent() m...

EUVD-2026-101594

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.13.2, an authenticated administrator using the default H2 database and security mode can upload a crafted SQL file to POST /api/v1/database/import-database...

CVE-2026-85714

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.13.2, an authenticated administrator using the default H2 database and security mode can upload a crafted SQL file to POST /api/v1/database/import-database...

CVE-2026-85714 Stirling-PDF: Remote Code Execution via H2

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.13.2, an authenticated administrator using the default H2 database and security mode can upload a crafted SQL file to POST /api/v1/database/import-database...

CVE-2026-85714 Stirling-PDF: Remote Code Execution via H2

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.13.2, an authenticated administrator using the default H2 database and security mode can upload a crafted SQL file to POST /api/v1/database/import-database...

CVE-2026-85714 Stirling-PDF: Remote Code Execution via H2

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.13.2, an authenticated administrator using the default H2 database and security mode can upload a crafted SQL file to POST /api/v1/database/import-database...

USN-8931-1: Apache HTTP Server vulnerabilities

이지웅 discovered that Apache HTTP Server exposed WebDAV property information. A remote attacker could possibly use this issue to obtain sensitive information. CVE-2026-58415 Zhen Kong and Charles Vosburgh discovered that Apache HTTP Server did not properly validate FTP server responses. A remote...

CVE-2026-98345 affecting package kernel for versions less than 6.6.158.1-1

CVE-2026-98345 affecting package kernel for versions less than 6.6.158.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-98191 affecting package kernel for versions less than 6.6.158.1-1

CVE-2026-98191 affecting package kernel for versions less than 6.6.158.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-98369 affecting package kernel for versions less than 6.6.158.1-1

CVE-2026-98369 affecting package kernel for versions less than 6.6.158.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-98360 affecting package kernel for versions less than 6.6.158.1-1

CVE-2026-98360 affecting package kernel for versions less than 6.6.158.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-98007 affecting package kernel for versions less than 6.6.158.1-1

CVE-2026-98007 affecting package kernel for versions less than 6.6.158.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-98031 affecting package kernel for versions less than 6.6.158.1-1

CVE-2026-98031 affecting package kernel for versions less than 6.6.158.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-98214 affecting package kernel for versions less than 6.6.158.1-1

CVE-2026-98214 affecting package kernel for versions less than 6.6.158.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-93813 affecting package kernel for versions less than 6.6.158.1-1

CVE-2026-93813 affecting package kernel for versions less than 6.6.158.1-1. An upgraded version of the package is available that resolves this issue...