CVE-2026-75896 CRITICAL

CVE-2026-75896: Use of Hard-coded LDAP Credentials in TÜBİTAK BİLGEM's Liderahenk

Vendor Tübi̇tak Bi̇lgem Software Technologies Research Institute
Product Liderahenk
Weakness CWE-798 · Hardcoded credentials
Published August 26, 2026
Last update August 26, 2026
View on NVD All CVEs

CVSS base score

9.1/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

What the vulnerability does

01Description

Use of Hard-coded Credentials vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Try Common or Default Usernames and Passwords. This issue affects Liderahenk: before 3.5.5.

Key dates

02Disclosure timeline

August 26, 2026 CVE published
August 26, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-27073 WordPress Addi – Cuotas que se adaptan a ti plugin <= 2.0.4 - Broken Authentication vulnerability CVE-2026-1233 Text to Speech (TTS) by Mementor <= 1.9.8 - Use of Hardcoded Password to Unauthenticated Remote Database Access CVE-2025-8570 BeyondCart Connector <= 3.0.1 - Missing Configuration of JWT Secret to Unauthenticated Privilege Escalation via determine_current_user Filter CVE-2025-10850 Felan Framework <= 1.1.4 - Hardcoded Credentials CVE-2024-5810 WP2Speed Faster – Optimize PageSpeed Insights Score 90-100 <= 1.0.1 - Improper Authorization due to use of Hardcoded Credentials