CVE ID :CVE-2026-40459 Published : April 17, 2026, 2:16 p.m. | 1 hour, 2 minutes ago Description :PAC4J is vulnerable to LDAP Injection in multiple methods. A low-privileged remote attacker can inject crafted LDAP syntax into ID-based search parameters, potentially resulting in unauthorized LDAP queries and arbitrary directory operations. This issue was fixed in PAC4J versions 4.5.10, 5.7.10 and 6.4.1 Severity: 8.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...