What is CVE-2026-4256?

CVE-2026-4256 is a high-severity vulnerability in Peakup Technology Inc. Passgate, classified under LDAP Injection. CVSS score: 8.2/10. Published 2026-07-09.

How severe is CVE-2026-4256?

High severity. CVSS v3 base score is 8.2 out of 10.

LDAP Injection in Peakup Technology Inc. Passgate

CVE-2026-4256

Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in PEAKUP Technology Inc. PassGate allows LDAP Injection. This issue affects PassGate: through 30042026.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N.

Affected products

Peakup Technology Inc. Passgate — versions 0

Weakness classification (CWE)

CWE-90 — LDAP Injection

References

iletisim@usom.gov.tr (government-resource)

Frequently asked questions

What is CVE-2026-4256?: CVE-2026-4256 is a high-severity vulnerability in Peakup Technology Inc. Passgate, classified under LDAP Injection. CVSS score: 8.2/10. Published 2026-07-09.
How severe is CVE-2026-4256?: High severity. CVSS v3 base score is 8.2 out of 10.