https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 19:44:04 +0000 https://cve.radiocsirt.org/vuln/cve-2026-12804 <p><strong>Affected:</strong> lemonldap-ng</p> <p>A vulnerability was detected in lemonldap-ng up to 2.23.0. Impacted is an unknown function in the library lemonldap-ng-portal/lib/Lemonldap/NG/Portal/CDC.pm of the component SAML Common Domain Cookie Endpoint. Performing a manipulation of the argument url results in open redirect. The attack is possible to be carried out remotely. The exploit is now public and may be used. Applying a patch is the recommended action to fix this issue. The vendor confirms, that &#34;it has been fixed some days ago and will be available in 2.23.1. CDC is quite never used, so the impact is very low.&#34;</p> <p><strong>Affected:</strong> lemonldap-ng</p> <p>A vulnerability was detected in lemonldap-ng up to 2.23.0. Impacted is an unknown function in the library lemonldap-ng-portal/lib/Lemonldap/NG/Portal/CDC.pm of the component SAML Common Domain Cookie Endpoint. Performing a manipulation of the argument url results in open redirect. The attack is possible to be carried out remotely. The exploit is now public and may be used. Applying a patch is the recommended action to fix this issue. The vendor confirms, that &#34;it has been fixed some days ago and will be available in 2.23.1. CDC is quite never used, so the impact is very low.&#34;</p> https://cve.radiocsirt.org/vuln/cve-2026-12804