CVE-2026-113438 Pleasanter provided fails to properly verify passwords in LDAP authentication when processing specially crafted requests under certain configurations.
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-113438?
CVE-2026-113438 is a medium-severity vulnerability in Implem Inc. Pleasanter, published on 26 Oct 2026.
Official description
Pleasanter provided fails to properly verify passwords in LDAP authentication when processing specially crafted requests under certain configurations. If exploited, an attacker may bypass LDAP authentication by providing only a valid Login ID, without a password. As a result, an attacker may view, alter or delete information stored in the product with the privilege of the account used to log in.
Weakness: CWE-304
Which versions are affected by CVE-2026-113438?
How do I fix CVE-2026-113438?
No fix has been published for CVE-2026-113438 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-113438 being exploited?
There is no known exploitation of CVE-2026-113438 in the wild and no public exploit code.
Sources
Also known as GHSA-6pxx-w74c-j39c.