Skip to content
OpenAdvisories

Vendor

LMS

3 known vulnerabilities.

Products

LMS 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2026-40456

    OS Command Injection in LMS

    An OS Command Injection vulnerability exists in LMS (LAN Management System) before commit 9fcb4de due to an IP address parameter being passed to the "exec()" function without proper validation, allowing attackers to execute arbitrary operating system commands.

    LMS LMS
  • High 8.6
    CVE-2026-40455

    SQL Injection in LMS

    An SQL Injection vulnerability exists in LMS (LAN Management System) before commit 4cb30a7 within the "tarifflist.php" module due to insufficient sanitization of the POST "tg[]" parameter. The application directly concatenates user-supplied array values into …

    LMS LMS