CVE-2026-36436: Trisolutions BRPerfX vulnerability

Published Oct 15, 2026

Updated

An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface. An authenticated administrator can inspect the client-side code to retrieve the credential.

Affected Software

1 affected component

Trisolutions BRPerfX=1.4.4.0

Event History

Oct 15, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

Who can exploit this issue?

An authenticated administrator with access to the administrative configuration interface can inspect client-side code and retrieve the exposed LDAP credential.

What access does an attacker need before exploiting it?

The attacker must already be authenticated as an administrator and able to access the administrative configuration interface.

How can I determine whether my deployment is affected?

Check whether you are running Trisolutions BRPerfX version 1.4.4.0 and inspect the administrative configuration interface's client-side code for plaintext LDAP credentials.

CVE-2026-36436: Trisolutions BRPerfX vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What access does an attacker need before exploiting it?

How can I determine whether my deployment is affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What access does an attacker need before exploiting it?

How can I determine whether my deployment is affected?