PT-2026-56800 · Passgate · Passgate

Published 2026-07-09 · Updated 2026-07-09 · CVE-2026-4256

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions PassGate versions prior to 30042026

Description PassGate contains an LDAP injection flaw resulting from the improper neutralization of special elements used in an LDAP query. LDAP injection is a technique where an attacker inserts malicious code into a Lightweight Directory Access Protocol (LDAP) query to manipulate the results or bypass authentication.

Recommendations Update PassGate to a version newer than 30042026.

Fix

Weakness Enumeration

CWE-90

Related Identifiers

CVE-2026-4256

Affected Products

Passgate

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-4256 · Security Note
• https://twitter.com/infoflowcloud/status/2075230048613728304 · Twitter Post
• https://twitter.com/CVEnew/status/2075229332880978119 · Twitter Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0523 · Note