Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. Prior to version 9.5, a local file inclusion was detected in the PDF export that allows users to include local PHP files and this way execute code. In combination with GHSA-88hf-2cjm-m9g8 this allows to execute arbitrary code. Users need to login to LAM to exploit this vulnerability. Version 9.5 fixes the issue. Although upgrading is recommended, a workaround would be to make /var/lib/ldap-account-manager/config read-only for the web-server user and delete the PDF profile files (making PDF exports impossible).
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-18 | 5 | Disclosure3General1Patch1 |
| 2026-03-19 | 2 | Disclosure1General1 |
@Deathlurk @IceSolst this one? https://www.cvedetails.com/cve/CVE-2026-27894/ yeh also wild
Post summary
The tweet simply points to the CVE entry for CVE‑2026‑27894 with no additional details about the vulnerability, exploitability, or remediation.
⚡ New CVE Alert: CVE-2026-27894 📊 Severity: 8.8 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-27894 #CVE-2026-27894 #CVE #High #CyberSecurity #InfoSec https://t.co/hcrHWly3tZ
Post summary
The tweet announces CVE-2026-27894 with a severity score of 8.8, affecting multiple unspecified products, but offers no details about exploitation or fixes.
🟠 CVE-2026-27894 - High LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. Prior to version 9.5, a local file inclusion was detected in ... https://www.thehackerwire.com/vulnerability/CVE-2026-27894/ https://t.co/A57tosHl2c
Post summary
CVE-2026-27894 is a local file inclusion vulnerability affecting LDAP Account Manager versions before 9.5, with no PoC, exploit, or patch information disclosed in the provided text.
CVE-2026-27894 Local File Inclusion in LDAP Account Manager Prior to Version 9.5 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-27894
Post summary
The text announces CVE-2026-27894, a local file inclusion flaw in LDAP Account Manager versions before 9.5, with a reference to a vulnerability details page, but provides no PoC, exploit, or patch information.
CVE-2026-27894 LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. Prior to version 9.5, a local file i… https://www.cve.org/CVERecord?id=CVE-2026-27894
Post summary
The post notes CVE-2026-27894 as a local file inclusion issue in LDAP Account Manager before version 9.5 but does not provide further technical detail, PoC, exploit, or patch information.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-27894 - LAM has Authenticated Local File Inclusion (LFI) in PDF export Intel Report: https://ift.tt/ejPwMlN
Post summary
The message alerts about CVE-2026-27894, an authenticated LFI flaw in LAM’s PDF export, without indicating any PoC, exploit, active use, or patch.
[CVE-2026-27894: HIGH] LDAP Account Manager (LAM) webfrontend had a local file inclusion vulnerability pre-version 9.5 allowing code execution. Upgrade to v9.5 or make config files read-only for fix.#cve,CVE-2026-27894,#cybersecurity https://cvefind.com/CVE-2026-27894
Post summary
The post identifies a CVE‑2026‑27894 LFI vulnerability in LDAP Account Manager before v9.5 and recommends upgrading to v9.5 or making configuration files read‑only as a fix.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ldap-account-manager | ldap_account_manager | - | - | - |