https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T23:01:37.977896+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-328939 EUVD-2026-328939 2026-10-09T23:01:38.037984+00:00 EUVD-2026-328939 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12804 fkie_cve-2026-12804 2026-10-09T23:01:38.038022+00:00

A vulnerability was detected in lemonldap-ng up to 2.23.0. Impacted is an unknown function in the library lemonldap-ng-portal/lib/Lemonldap/NG/Portal/CDC.pm of the component SAML Common Domain Cookie Endpoint. Performing a manipulation of the argument url results in open redirect. The attack is possible to be carried out remotely. The exploit is now public and may be used. Applying a patch is the recommended action to fix this issue. The vendor confirms, that "it has been fixed some days ago and will be available in 2.23.1. CDC is quite never used, so the impact is very low."

 https://cve.radiocsirt.org/vuln/ghsa-g4v8-q2mr-m933 GHSA-g4v8-q2mr-m933 2026-10-09T23:01:38.038060+00:00

A vulnerability was detected in lemonldap-ng up to 2.23.0. Impacted is an unknown function in the library lemonldap-ng-portal/lib/Lemonldap/NG/Portal/CDC.pm of the component SAML Common Domain Cookie Endpoint. Performing a manipulation of the argument url results in open redirect. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-12804 UBUNTU-CVE-2026-12804 2026-10-09T23:01:38.038079+00:00

Affected: Ubuntu:16.04:LTS: lemonldap-ng, Ubuntu:18.04:LTS: lemonldap-ng, Ubuntu:20.04:LTS: lemonldap-ng, Ubuntu:22.04:LTS: lemonldap-ng, Ubuntu:24.04:LTS: lemonldap-ng, Ubuntu:25.10: lemonldap-ng, Ubuntu:26.04:LTS: lemonldap-ng

A vulnerability was detected in lemonldap-ng up to 2.23.0. Impacted is an unknown function in the library lemonldap-ng-portal/lib/Lemonldap/NG/Portal/CDC.pm of the component SAML Common Domain Cookie Endpoint. Performing a manipulation of the argument url results in open redirect. The attack is possible to be carried out remotely. The exploit is now public and may be used. Applying a patch is the recommended action to fix this issue. The vendor confirms, that "it has been fixed some days ago and will be available in 2.23.1. CDC is quite never used, so the impact is very low."