A notice reproduced in the oss-sec feed says CVE-2026-95811 affects Lemonldap::NG::Handler for Perl. According to the text, paths written in equivalent forms can bypass location rules. The material was originally published on September 24, 2026; the feed record shows September 25.
The reported vulnerable ranges are version 2.0.0 up to, but not including, 2.16.10; 2.17.0 up to, but not including, 2.21.6; and 2.22.0 up to, but not including, 2.23.4. The available excerpt does not detail exploitation or other effects, so do not assume impact beyond what it states.
To respond, inventory the installed version and compare it with these ranges. If it is vulnerable, plan an update to a version outside the applicable range and test the relevant location rules and paths before completing the change. The cited text provides no further remediation instructions.
Consult the original notice in the oss-sec archive by searching for CVE-2026-95811 and the Lemonldap-NG-Handler distribution. Since the feed content is an automatic translation, check the original publication and official CVE records before making decisions. If using AI to analyze configurations or logs, remove personal data and secrets before submitting them.