SQL Injection Vulnerability in LMS (LAN Management System) by LMS Development Team
CVE-2026-40455

8.6HIGH

Key Information:

Vendor

Lms

Status
Lms
Vendor
CVE Published:
18 June 2026

What is CVE-2026-40455?

An SQL Injection vulnerability in the LMS (LAN Management System) allows authenticated attackers to exploit insufficient input sanitization in the 'tarifflist.php' module. By manipulating the POST parameter 'tg[]', attackers can concatenate unsanitized user inputs within SQL queries, facilitating Error-Based SQL Injection. This vulnerability poses significant risks, as it may enable the extraction of sensitive information from the application’s database, elevating security concerns for deployments using affected versions.

Affected Version(s)

LMS 0 < 4cb30a7

References

https://github.com/chilek/lms/commit/4cb30a70e7e3d8a0ea53...
patch
https://cert.pl/posts/2026/06/CVE-2026-40455
third-party-advisory
https://lms.org.pl/
product

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tymoteusz Dominik
.