Is CVE-2026-12804 actively exploited?

No active exploitation of CVE-2026-12804 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-12804 be exploited remotely?

Yes. CVE-2026-12804 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-12804?

CVE-2026-12804 has a CVSS score of 4.3 (MEDIUM).

HOME VULNERABILITIESCVE-2026-12804

MEDIUM

CVE-2026-12804

CWE-601Published: June 21, 2026· Updated: Jun 22, 2026

4.3

CVSS v3.1

EPSS:0.26%probability of exploitation in 30 daysPercentile:17.6th

Official Description

A vulnerability was detected in lemonldap-ng up to 2.23.0. Impacted is an unknown function in the library lemonldap-ng-portal/lib/Lemonldap/NG/Portal/CDC.pm of the component SAML Common Domain Cookie Endpoint. Performing a manipulation of the argument url results in open redirect. The attack is possible to be carried out remotely. The exploit is now public and may be used. Applying a patch is the recommended action to fix this issue. The vendor confirms, that "it has been fixed some days ago and will be available in 2.23.1. CDC is quite never used, so the impact is very low."

NVD Source

Technical Analysis

CVE-2026-12804 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation does not require any privileges, though user interaction (Required) is needed, which slightly reduces the risk of mass automated attacks.