CVE-2026-36436CWE-522

CVE-2026-36436

High · published October 15, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
26.2
In the wild
Unconfirmed
What it is

An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface. An authenticated administrator can inspect the client-side code to retrieve the credential.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00340 · 26.2th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2026-10-15T23:17Z
References (3)
https://github.com/vtrmk/CVE-2026-36436-Public-Reference-Pack · [email protected]https://www.trisolutions.com.br/ · [email protected]https://www.ufrgs.br/gimscop/about-us/products/brperfx-br-pga/ · [email protected]
EPSS history
Timeline
  • 17 OCT 03:30Z
    EPSS moved — → 0%
    epss
  • 15 OCT 00:00Z
    An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface
    cvelistv5
  • 15 OCT 00:00Z
    An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface
    cvelistv5