CVE-2026-113438
6.5 MEDIUMPublished 2026-10-26 · Updated 2026-10-26
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Pleasanter provided fails to properly verify passwords in LDAP authentication when processing specially crafted requests under certain configurations. If exploited, an attacker may bypass LDAP authentication by providing only a valid Login ID, without a password. As a result, an attacker may view, alter or delete information stored in the product with the privilege of the account used to log in.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weaknesses
CWE-304
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2026-100667PoC
- UNSCOREDCVE-2026-101296
- UNSCOREDCVE-2026-108071
- HIGHCVE-2026-73535PoC
- HIGHCVE-2026-89068
- HIGHCVE-2026-93994
- CRITICALCVE-2026-94052
Related by shared AI tags and CWE weakness class. Browse the full archive.