LDAP Injection Vulnerability in PEAKUP Technology Inc. PassGate
CVE-2026-4256

8.2HIGH

Key Information:

Vendor

Peakup Technology Inc.

Status
Passgate
Vendor
CVE Published:
9 July 2026

What is CVE-2026-4256?

An LDAP injection vulnerability exists in PassGate by PEAKUP Technology Inc. This flaw enables attackers to manipulate LDAP queries by injecting malicious inputs. Such exploitation can lead to unauthorized access to sensitive information stored in LDAP repositories, compromising the application's security posture.

Affected Version(s)

PassGate 0 <= 30042026

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Eren Can Ă–ZMEN
.