LDAPAccountManager CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM LDAPAccountManager CVE published 2026-10-14

CVE-2026-55167

PatchSiren debrief for CVE-2026-55167: LDAP Account Manager WebAuthn authentication challenge issue. This issue affects LAM users with WebAuthn two-factor authentication enabled. The vulnerability allows a user who has completed valid password authentication to retain the same signed WebAuthn ceremony state. The practical risk is limited by the requirement for a valid password, the same PHP session, and a [truncated]