PT-2026-25004 · Undefined · Undefined

0Xnayel + 1 · Publicado 2026-03-12 · Atualizado 2026-03-30 · CVE-2026-4045

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Baixa

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions projectsend versions prior to r1946

Description A flaw exists in projectsend up to revision r1945. This impacts an unknown function within the includes/Classes/Auth.php file. Manipulating the ldap email argument can cause an observable discrepancy in the response. The attack can be executed remotely and is associated with a high level of complexity. The exploit has been published. The vendor was contacted regarding this issue but did not respond.

Recommendations Update projectsend to version r1946 or later.

Exploit

Correção

Side Channel Attack

Enumeração de Fraquezas

CWE-203

CWE-204

Identificadores relacionados

CVE-2026-4045

Produtos afetados

Undefined

Referências · 8

• 🔥 https://drive.google.com/file/d/1TNwWNTcra2ykx0yXpATPmsPgJxIxOrWb/view?usp=sharing · Exploit
• https://vuldb.com/?ctiid.350657 · Nota
• https://t.me/CVEtracker/47275 · Publicação no Telegram
• https://twitter.com/0xNayel/status/2038560041343541573 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2032230714020593900 · Publicação no Twitter
• https://vuldb.com/?submit.769577 · Nota
• https://vuldb.com/?id.350657 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-4045 · Nota de Segurança