{"id":"CVE-2026-36436","aliases":["EUVD-2026-102422","GHSA-49gp-24pf-vw78"],"status":"published","title":"An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the...","description":"An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface. An authenticated administrator can inspect the client-side code to retrieve the credential.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.0034,"percentile":0.27769,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-522"],"published":"2026-10-15T00:00:00Z","modified":"2026-10-16T19:56:15Z","exploits":[{"source":"pocgithub","id":"vtrmK/CVE-2026-36436-Public-Reference-Pack","title":"vtrmK/CVE-2026-36436-Public-Reference-Pack","date":"2026-05-16","url":"https://github.com/vtrmK/CVE-2026-36436-Public-Reference-Pack"}],"references":[{"url":"https://www.trisolutions.com.br/"},{"url":"https://www.ufrgs.br/gimscop/about-us/products/brperfx-br-pga/"},{"url":"https://github.com/vtrmk/CVE-2026-36436-Public-Reference-Pack"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-36436"},{"url":"https://www.trisolutions.com.br"},{"url":"https://www.ufrgs.br/gimscop/about-us/products/brperfx-br-pga"},{"url":"https://github.com/advisories/GHSA-49gp-24pf-vw78"}],"sources":{"cve":[{"id":"CVE-2026-36436","description":"An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface. An authenticated administrator can inspect the client-side code to retrieve the credential.","status":"published","published":"2026-10-15T00:00:00Z","modified":"2026-10-16T15:17:54.852Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T14:19:55.176387Z"}],"euvd":[{"id":"EUVD-2026-102422","description":"An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface. An authenticated administrator can inspect the client-side code to retrieve the credential.","status":"published","published":"2026-10-15T00:00:00Z","modified":"2026-10-16T15:17:54Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T17:00:05.229655Z"}],"ghsa":[{"id":"GHSA-49gp-24pf-vw78","title":"An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the...","description":"An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface. An authenticated administrator can inspect the client-side code to retrieve the credential.","status":"published","published":"2026-10-15T21:36:12Z","modified":"2026-10-16T18:34:35Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T15:13:52.326136Z"}],"nvd":[{"id":"CVE-2026-36436","description":"An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface. An authenticated administrator can inspect the client-side code to retrieve the credential.","status":"published","published":"2026-10-15T19:17:38.52Z","modified":"2026-10-16T19:56:15.773Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T14:12:59.751798Z"}]}}