What is GHSA-765c-7qf8-cw9w?

GHSA-765c-7qf8-cw9w is a security advisory published by GitHub Security Advisories with High severity. An OS Command Injection vulnerability exists in LMS (LAN Management System) before commit 9fcb4de...

Which CVE IDs does GHSA-765c-7qf8-cw9w cover?

GHSA-765c-7qf8-cw9w covers the following CVE IDs: CVE-2026-40456. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-765c-7qf8-cw9wHigh

An OS Command Injection vulnerability exists in LMS (LAN Management System) before commit 9fcb4de...

Vendor

GitHub Security Advisories

Published

June 18, 2026

Last Modified

June 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-40456 →

📋 Description

An OS Command Injection vulnerability exists in LMS (LAN Management System) before commit 9fcb4de due to an IP address parameter being passed to the "exec()" function without proper validation, allowing attackers to execute arbitrary operating system commands.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-40456
https://github.com/chilek/lms/commit/9fcb4de19b7d76394898dbc124252b86b07ac0ed
https://cert.pl/posts/2026/06/CVE-2026-40455
https://lms.org.pl
https://github.com/advisories/GHSA-765c-7qf8-cw9w