A vulnerability classified as critical has been found in PAC4J up to 4.5.9/5.7.9/6.4.0. Impacted is an unknown function of the component LDAP Handler. Performing a manipulation of the argument Search results in ldap injection.
This vulnerability is reported as CVE-2026-40459. The attack is possible to be carried out remotely. No exploit exists.
It is recommended to upgrade the affected component.
