https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T19:12:27.753134+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-04003 bdu:2022-04003 2026-10-06T19:12:27.756985+00:00 bdu:2022-04003 https://cve.radiocsirt.org/vuln/cnvd-2022-53546 cnvd-2022-53546 2026-10-06T19:12:27.757024+00:00 cnvd-2022-53546 https://cve.radiocsirt.org/vuln/euvd-2026-233957 EUVD-2026-233957 2026-10-06T19:12:27.757040+00:00 EUVD-2026-233957 https://cve.radiocsirt.org/vuln/fkie_cve-2022-31086 fkie_cve-2022-31086 2026-10-06T19:12:27.757053+00:00

LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 incorrect regular expressions allow to upload PHP scripts to config/templates/pdf. This vulnerability could lead to a Remote Code Execution if the /config/templates/pdf/ directory is accessible for remote users. This is not a default configuration of LAM. This issue has been fixed in version 8.0. There are no known workarounds for this issue.

 https://cve.radiocsirt.org/vuln/gsd-2022-31086 gsd-2022-31086 2026-10-06T19:12:27.757085+00:00 gsd-2022-31086 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-31086 UBUNTU-CVE-2022-31086 2026-10-06T19:12:27.757097+00:00

Affected: Ubuntu:16.04:LTS: ldap-account-manager, Ubuntu:18.04:LTS: ldap-account-manager, Ubuntu:20.04:LTS: ldap-account-manager, Ubuntu:22.04:LTS: ldap-account-manager, Ubuntu:25.10: ldap-account-manager, Ubuntu:26.04:LTS: ldap-account-manager

LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 incorrect regular expressions allow to upload PHP scripts to config/templates/pdf. This vulnerability could lead to a Remote Code Execution if the /config/templates/pdf/ directory is accessible for remote users. This is not a default configuration of LAM. This issue has been fixed in version 8.0. There are no known workarounds for this issue.