Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in projectsend up to r1945. This impacts an unknown function of the file includes/Classes/Auth.php. Executing a manipulation of the argument ldap_email can lead to observable response discrepancy. The attack can be executed remotely. A high complexity level is associated with this attack. The exploitability is said to be difficult. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
New CVEs assigned ! Check writups at http://0xnayel.com CVE-2026-4044: https://0xnayel.com/publications/CVE-2026-4044 CVE-2026-4045 https://0xnayel.com/publications/CVE-2026-4045
Post summary
A brief announcement of two new CVEs with links to writeups, but no substantive detail or actionable information is provided.
CVE-2026-4045 A flaw has been found in projectsend up to r1945. This impacts an unknown function of the file includes/Classes/Auth.php. Executing a manipulation of the argument ldap_… https://www.cve.org/CVERecord?id=CVE-2026-4045
Post summary
CVE-2026-4045 was identified in ProjectSend up to r1945, affecting an unknown function in Auth.php with manipulation of the ldap_ argument, but no PoC, exploit, patch or active exploitation information is provided.