CVE-2026-4256

Published Jul 9, 2026·Updated Jul 9, 2026

NVD Description

Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in PEAKUP Technology Inc. PassGate allows LDAP Injection. This issue affects PassGate: through 30042026.

Public Exploits & PoCs2 found

[POC] CVE-2026-42568 — CVE-2026-42568

An LDAP injection vulnerability exists in org.yamcs.security.LdapAuthModule. The username parameter is inserted directly into LDAP search filters without RFC 4515 escaping, allowing authentication bypass.

[POC] CVE-2026-42569 — CVE-2026-42569

CVE-2026-42569

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free