Every CVE Search/ Get API key

CVE-2026-19843

389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor

8.4 HighPublic exploitFix available

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft a malicious DN containing shell metacharacters. When a Cockpit administrator subsequently views the entry in the 389 Console, the embedded shell command executes with root privileges on the directory server host.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
High
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.48%Unchanged since Sep 8, 2026
90%50%10%1%

What each source reports

CVE List Score used 8.4

389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft a malicious DN containing shell metacharacters. When a Cockpit administrator subsequently views the entry in the 389 Console, the embedded shell command executes with root privileges on the directory server host.

Record
CVE-2026-19843
CVSS 3.1
8.4 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-04
EUVDEUVD-2026-72458 8.4

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft a malicious DN containing shell metacharacters. When a Cockpit administrator subsequently views the entry in the 389 Console, the embedded shell command executes with root privileges on the directory server host.

Record
EUVD-2026-72458
CVSS 3.1
8.4 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-04
GitHub AdvisoriesGHSA-p34m-7cj2-q64p 8.4

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch...

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft a malicious DN containing shell metacharacters. When a Cockpit administrator subsequently views the entry in the 389 Console, the embedded shell command executes with root privileges on the directory server host.

Record
GHSA-p34m-7cj2-q64p
CVSS 3.1
8.4 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-02
NVD 8.4

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft a malicious DN containing shell metacharacters. When a Cockpit administrator subsequently views the entry in the 389 Console, the embedded shell command executes with root privileges on the directory server host.

Record
CVE-2026-19843
CVSS 3.1
8.4 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-05
OSVDEBIAN-CVE-2026-19843 8.4

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft a malicious DN containing shell metacharacters. When a Cockpit administrator subsequently views the entry in the 389 Console, the embedded shell command executes with root privileges on the directory server host.

Record
DEBIAN-CVE-2026-19843
CVSS 3.1
8.4 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-05
OSVRHSA-2026:64768 8.4

Red Hat Security Advisory: 389-ds-base security update

Record
RHSA-2026:64768
CVSS 3.1
8.4 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
Show 16 moreShow less
OSVRHSA-2026:64769 8.4

Red Hat Security Advisory: 389-ds-base security update

Record
RHSA-2026:64769
CVSS 3.1
8.4 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:64779 9.8

Red Hat Security Advisory: redhat-ds:12 security, bug fix, and enhancement update

Record
RHSA-2026:64779
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:64780 9.8

Red Hat Security Advisory: redhat-ds:12 security, bug fix, and enhancement update

Record
RHSA-2026:64780
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:64782 8.4

Red Hat Security Advisory: redhat-ds:12 security update

Record
RHSA-2026:64782
CVSS 3.1
8.4 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:64792 9.8

Red Hat Security Advisory: redhat-ds:11 security, bug fix, and enhancement update

Record
RHSA-2026:64792
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:64793 9.8

Red Hat Security Advisory: redhat-ds:11 security, bug fix, and enhancement update

Record
RHSA-2026:64793
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:65375 8.4

Red Hat Security Advisory: redhat-ds:12 security update

Record
RHSA-2026:65375
CVSS 3.1
8.4 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:79217 9.8

Red Hat Security Advisory: redhat-ds:11 security, bug fix, and enhancement update

Record
RHSA-2026:79217
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-19843 8.4

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft a malicious DN containing shell metacharacters. When a Cockpit administrator subsequently views the entry in the 389 Console, the embedded shell command executes with root privileges on the directory server host.

Record
UBUNTU-CVE-2026-19843
CVSS 3.1
8.4 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-99986 No score

CVE-2026-19843 affecting package 389-ds-base 3.1.1-12

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft a malicious DN containing shell metacharacters. When a Cockpit administrator subsequently views the entry in the 389 Console, the embedded shell command executes with root privileges on the directory server host.

Record
AZL-99986
Updated
2026-11-05
OSVopenSUSE-SU-2026:11739-1 No score

389-ds-3.3.1+8c2711bd6-1.1 on GA media

These are all security issues fixed in the 389-ds-3.3.1+8c2711bd6-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11739-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21950-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check (bsc#1273133).
  • CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denial of service or potentially achieve remote code execution (bsc#1279864).
  • CVE-2026-18453: 389-ds-base: 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search (bsc#1279572).
  • CVE-2026-18922: stale identity carried in a Cyrus SASL auxiliary property during SASL PLAIN authentication allows unauthenticated attackers to achieve privilege escalation to Directory Manager (bsc#1279865).
  • CVE-2026-19843: unescaped LDAP DN in Cockpit 389 Console LDAP editor allows an LDAP user with delegated privileges to execute shell commands with root privileges on the directory server host (bsc#1279866).
  • CVE-2026-76560: incorrect matching in the SELFDN ACI bind-rule evaluator allows an anonymous LDAP client to bypass access controls on directory entries containing empty SELFDN attributes (bsc#1279867).

Changes for 389-ds:

  • Update to version 3.0.7~git2.2846d5288:
  • Issue 7757 - stack-buffer-overflow caused by slapi_attr_init_syntax() (#7759)
  • Issue 7796 - A large received replicaID can overflow the storage buffer (#7797)
  • Issue 7041 - Add WebUI test for group member management (#7111)
  • Issue 7808 - CI - harden online_import_nosync_test (#7809)
  • Issue 7611 - PBKDF2 password verification should reject invalid iteration counts (#7632) (#7812)
  • [Backport 389-ds-base-3.0] Update rust-dependencies (#7799)
  • Issue 7595 - Remove the nightly dedup gate and fix dispatched test runs
  • Fix expiration time check (#7718)
  • Issue 7774 - Add backport action (#7775)
  • Issue 7770 - Testimony failure in test_cleanruv_extop_security.py (#7771)
  • Issue 3082 - Add test389.topologies compatibility shim for backports (#7725)
  • Issue 7595 - Skip redundant CI runs to relieve the Actions queue (#7749)
  • Issue 7760 - CI - harden dsconf_task_test.py
  • Issue 4701 - Fix UAF when excluding attrs from retro changelog (#7730)
  • Issue 7723 - Range search returns an empty result when its start key is removed (#7724)
  • Issue 7639 - Move log compression outside of global write lock
  • Issue 7631 - Don't install bpftrace by default (#7726)
  • Issue 7735 - Heap overflow when parsing objectclass superior (#7736)
  • Issue 7733 - Typo about nsuniqueid in tombstone_to_conflict (#7734)
  • Issue 7707 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() in join_supplier/hub/consumer (#7708)
Record
openSUSE-SU-2026:21950-1
Updated
2026-11-02
OSVSUSE-SU-2026:23916-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check (bsc#1273133).
  • CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denial of service or potentially achieve remote code execution (bsc#1279864).
  • CVE-2026-18453: 389-ds-base: 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search (bsc#1279572).
  • CVE-2026-18922: stale identity carried in a Cyrus SASL auxiliary property during SASL PLAIN authentication allows unauthenticated attackers to achieve privilege escalation to Directory Manager (bsc#1279865).
  • CVE-2026-19843: unescaped LDAP DN in Cockpit 389 Console LDAP editor allows an LDAP user with delegated privileges to execute shell commands with root privileges on the directory server host (bsc#1279866).
  • CVE-2026-76560: incorrect matching in the SELFDN ACI bind-rule evaluator allows an anonymous LDAP client to bypass access controls on directory entries containing empty SELFDN attributes (bsc#1279867).

Changes for 389-ds:

  • Update to version 3.0.7~git2.2846d5288:
  • Issue 7757 - stack-buffer-overflow caused by slapi_attr_init_syntax() (#7759)
  • Issue 7796 - A large received replicaID can overflow the storage buffer (#7797)
  • Issue 7041 - Add WebUI test for group member management (#7111)
  • Issue 7808 - CI - harden online_import_nosync_test (#7809)
  • Issue 7611 - PBKDF2 password verification should reject invalid iteration counts (#7632) (#7812)
  • [Backport 389-ds-base-3.0] Update rust-dependencies (#7799)
  • Issue 7595 - Remove the nightly dedup gate and fix dispatched test runs
  • Fix expiration time check (#7718)
  • Issue 7774 - Add backport action (#7775)
  • Issue 7770 - Testimony failure in test_cleanruv_extop_security.py (#7771)
  • Issue 3082 - Add test389.topologies compatibility shim for backports (#7725)
  • Issue 7595 - Skip redundant CI runs to relieve the Actions queue (#7749)
  • Issue 7760 - CI - harden dsconf_task_test.py
  • Issue 4701 - Fix UAF when excluding attrs from retro changelog (#7730)
  • Issue 7723 - Range search returns an empty result when its start key is removed (#7724)
  • Issue 7639 - Move log compression outside of global write lock
  • Issue 7631 - Don't install bpftrace by default (#7726)
  • Issue 7735 - Heap overflow when parsing objectclass superior (#7736)
  • Issue 7733 - Typo about nsuniqueid in tombstone_to_conflict (#7734)
  • Issue 7707 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() in join_supplier/hub/consumer (#7708)
Record
SUSE-SU-2026:23916-1
Updated
2026-11-02
OSVSUSE-SU-2026:4380-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check (bsc#1273133).
  • CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denial of service or potentially achieve remote code execution (bsc#1279864).
  • CVE-2026-18453: 389-ds-base: 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search (bsc#1279572).
  • CVE-2026-18922: stale identity carried in a Cyrus SASL auxiliary property during SASL PLAIN authentication allows unauthenticated attackers to achieve privilege escalation to Directory Manager (bsc#1279865).
  • CVE-2026-19843: unescaped LDAP DN in Cockpit 389 Console LDAP editor allows an LDAP user with delegated privileges to execute shell commands with root privileges on the directory server host (bsc#1279866).
  • CVE-2026-76560: incorrect matching in the SELFDN ACI bind-rule evaluator allows an anonymous LDAP client to bypass access controls on directory entries containing empty SELFDN attributes (bsc#1279867).

Changes for 389-ds:

  • Update to version 2.8 LTS (jsc#PED-16949).

  • Update to version 2.8.2~git10.030ada7a6:

  • Issue 6596 - BUG - Compilation Regresion (#6597) (#7866)
  • Issue 7627 - When it exists configured matching rule for an (#7628)
  • [Backport 389-ds-base-2.8] Issue 7611 - PBKDF2 password verification should reject invalid iteration counts (#7852)
  • iadvisories/GHSA-rgxx-hcc4-x3h4 / heap-buffer-overflow in rdn_av_swap (#7826)
  • Migrate pwdchan to base64 0.23 Engine API
  • Update rust-dependencies
  • Issue 7823 - CI: stabilize test_controltype_expired_grace_limit (#7824)
  • Issue 7815 - Support nsslapd-attribute-name-exceptions when adding entries
  • Issue 7757 - stack-buffer-overflow caused by slapi_attr_init_syntax() (#7759)
  • Issue 7796 - A large received replicaID can overflow the storage buffer (#7797)
  • Issue 7041 - Add WebUI test for group member management (#7111)
  • Issue 7808 - CI - harden online_import_nosync_test (#7809)
  • Issue 7595 - Remove the nightly dedup gate and fix dispatched test runs
  • Fix expiration time check (#7718)
  • Issue 7774 - Add backport action (#7775)
  • Issue 7770 - Testimony failure in test_cleanruv_extop_security.py (#7771)
  • Issue 3082 - Add test389.topologies compatibility shim for backports (#7725)
  • Issue 7595 - Skip redundant CI runs to relieve the Actions queue (#7751)
  • Issue 7760 - CI - harden dsconf_task_test.py
  • Issue 4701 - Fix UAF when excluding attrs from retro changelog (#7730)
  • Issue 7723 - Range search returns an empty result when its start key is removed (#7724)
  • Issue 7735 - Heap overflow when parsing objectclass superior (#7736)
  • Issue 7733 - Typo about nsuniqueid in tombstone_to_conflict (#7734)
  • Issue 7284 - Creating local password policy succeeds with incorrect passwordInHistory value (#7662)
  • Issue 7284 - Automated test for creating local password policy with incorrect passwordInHistory value (#7608)
  • Issue 7284 - CI - Fix test_grace_limit_section after pwpolicy validation fix (#7357)
  • Issue 7284 - Creating local password policy succeeds with incorrect passwordInHistory value (#7285)
  • Issue 7707 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() in join_supplier/hub/consumer (#7708)
  • Issue 7711 - Fix typo in accountpolicy --login-history-size help text (#7713)
  • Issue 7688 - BUG - partial address leak in sso token (#7689)
  • Issue 7705 - With memberOfEntryScope set, deferred memberOf skips MODIFY operations (#7706)
  • Issue 7698 - Fix silent entry loss in LMDB bulk import waiter handling (#7699)
  • Issue 7666 - Replication performance degradation during total init on high-latency storage (#7667)
  • Issue 7201 - Syscall overhead in LMDB import writer thread (#7204)
  • Issue 7645 - Add runtime LeakSanitizer leak check (#7646)
  • Issue 7714 - UI - sass import rules are deprecated
  • Issue 7658 - Heap…
Record
SUSE-SU-2026:4380-1
Updated
2026-11-02
OSVSUSE-SU-2026:4929-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check (bsc#1273133).
  • CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denial of service or potentially achieve remote code execution (bsc#1279864).
  • CVE-2026-18453: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search (bsc#1279572).
  • CVE-2026-18922: stale identity carried in a Cyrus SASL auxiliary property during SASL PLAIN authentication allows unauthenticated attackers to achieve privilege escalation to Directory Manager (bsc#1279865).
  • CVE-2026-19843: unescaped LDAP DN in Cockpit 389 Console LDAP editor allows an LDAP user with delegated privileges to execute shell commands with root privileges on the directory server host (bsc#1279866).
  • CVE-2026-76560: incorrect matching in the SELFDN ACI bind-rule evaluator allows an anonymous LDAP client to bypass access controls on directory entries containing empty SELFDN attributes (bsc#1279867).
  • CVE-2026-86344: incomplete LDAP messages sent in rapid succession can cause worker thread exhaustion (bsc#1284028).
  • CVE-2026-86345: smuggled plaintext commands sent alongside StartTLS requests can cause response forgery and authentication bypasses (bsc#1284034).

Update to version 2.2.11~git12.1e612cde2:

  • Issue 7919 - CVE-2026-86344 - Fix worker pool exhaustion via partial LDAP messages (DoS)
  • Issue 7921 - Fix StartTLS plaintext buffer handling (#7922) (#7947)

Update to version 2.2.11~git10.1f26fcebd:

  • Issue 7912 - dsidm role create-filtered ignores --nsrolefilter and forces an interactive prompt (#7913)
  • Issue 7908 - dsctl cockpit open-firewall --zone passes a malformed argument (#7909)
  • Issue 7848 - Reject incomplete MD5 and GOST-YESCRYPT hashes (#7849)
  • Issue 7837 - importing ldif with entry with long attribute name and subtype causes stack-buffer-overflow (#7838)
  • Issue 6270 - heap-use-after-free with pwp dictionary path (#7791)
  • Issue 7611 - PBKDF2 password verification should reject invalid iteration counts (#7632) (#7854)
  • iadvisories/GHSA-rgxx-hcc4-x3h4 / heap-buffer-overflow in rdn_av_swap (#7826)
  • Migrate pwdchan to base64 0.23 Engine API
  • Update rust-dependencies

Update to version 2.2.11~git1.98ee3aac7:

  • Issue 7757 - stack-buffer-overflow caused by slapi_attr_init_syntax() (#7759)
  • Bump version to 2.2.11
  • Security fix for CVE-2026-76560
  • Security fix for CVE-2026-19843
  • Security fix for CVE-2026-18922
  • Security fix for CVE-2026-18453
  • Security fix for CVE-2026-18355
  • Issue 7595 - Remove the nightly dedup gate and fix dispatched test runs
  • Fix expiration time check (#7718)
  • Issue 7774 - Add backport action (#7775)
  • Issue 7770 - Testimony failure in test_cleanruv_extop_security.py (#7771)
  • Issue 1704 - Include stdbool.h in slapi headers on 2.4 (#7768)
  • CVE-2026-11770 - Fix StartReplicationRequest auth gate response format
  • Security fix for CVE-2026-11770
  • Issue 3082 - Add test389.topologies compatibility shim for backports (#7725)
  • Issue 7595 - Skip redundant CI runs to relieve the Actions queue (#7755)
  • Issue 4701 - Fix UAF when excluding attrs from retro changelog (#7730)
  • Issue 7723 - Range search returns an empty result when its start key is removed (#7724)
  • Issue 7735 - Heap overflow when parsing objectclass superior (#7736)
  • Issue 7733 - Typo about nsuniqueid in tombstone_to_conflict (#7734)
  • Issue 7707 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() in join_supplier/hub/consumer (#7708)
Record
SUSE-SU-2026:4929-1
Updated
2026-11-02
OSVSUSE-SU-2026:4932-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check (bsc#1273133).
  • CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denial of service or potentially achieve remote code execution (bsc#1279864).
  • CVE-2026-18453: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search (bsc#1279572).
  • CVE-2026-18922: stale identity carried in a Cyrus SASL auxiliary property during SASL PLAIN authentication allows unauthenticated attackers to achieve privilege escalation to Directory Manager (bsc#1279865).
  • CVE-2026-19843: unescaped LDAP DN in Cockpit 389 Console LDAP editor allows an LDAP user with delegated privileges to execute shell commands with root privileges on the directory server host (bsc#1279866).
  • CVE-2026-76560: incorrect matching in the SELFDN ACI bind-rule evaluator allows an anonymous LDAP client to bypass access controls on directory entries containing empty SELFDN attributes (bsc#1279867).
  • CVE-2026-86344: incomplete LDAP messages sent in rapid succession can cause worker thread exhaustion (bsc#1284028).
  • CVE-2026-86345: smuggled plaintext commands sent alongside StartTLS requests can cause response forgery and authentication bypasses (bsc#1284034).

Update to version 2.2.11~git12.1e612cde2:

  • Issue 7919 - CVE-2026-86344 - Fix worker pool exhaustion via partial LDAP messages (DoS)
  • Issue 7921 - Fix StartTLS plaintext buffer handling (#7922) (#7947)

Update to version 2.2.11~git10.1f26fcebd:

  • Issue 7912 - dsidm role create-filtered ignores --nsrolefilter and forces an interactive prompt (#7913)
  • Issue 7908 - dsctl cockpit open-firewall --zone passes a malformed argument (#7909)
  • Issue 7848 - Reject incomplete MD5 and GOST-YESCRYPT hashes (#7849)
  • Issue 7837 - importing ldif with entry with long attribute name and subtype causes stack-buffer-overflow (#7838)
  • Issue 6270 - heap-use-after-free with pwp dictionary path (#7791)
  • Issue 7611 - PBKDF2 password verification should reject invalid iteration counts (#7632) (#7854)
  • iadvisories/GHSA-rgxx-hcc4-x3h4 / heap-buffer-overflow in rdn_av_swap (#7826)
  • Migrate pwdchan to base64 0.23 Engine API
  • Update rust-dependencies

Update to version 2.2.11~git1.98ee3aac7:

  • Issue 7757 - stack-buffer-overflow caused by slapi_attr_init_syntax() (#7759)
  • Bump version to 2.2.11
  • Security fix for CVE-2026-76560
  • Security fix for CVE-2026-19843
  • Security fix for CVE-2026-18922
  • Security fix for CVE-2026-18453
  • Security fix for CVE-2026-18355
  • Issue 7595 - Remove the nightly dedup gate and fix dispatched test runs
  • Fix expiration time check (#7718)
  • Issue 7774 - Add backport action (#7775)
  • Issue 7770 - Testimony failure in test_cleanruv_extop_security.py (#7771)
  • Issue 1704 - Include stdbool.h in slapi headers on 2.4 (#7768)
  • CVE-2026-11770 - Fix StartReplicationRequest auth gate response format
  • Security fix for CVE-2026-11770
  • Issue 3082 - Add test389.topologies compatibility shim for backports (#7725)
  • Issue 7595 - Skip redundant CI runs to relieve the Actions queue (#7755)
  • Issue 4701 - Fix UAF when excluding attrs from retro changelog (#7730)
  • Issue 7723 - Range search returns an empty result when its start key is removed (#7724)
  • Issue 7735 - Heap overflow when parsing objectclass superior (#7736)
  • Issue 7733 - Typo about nsuniqueid in tombstone_to_conflict (#7734)
  • Issue 7707 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() in join_supplier/hub/consumer (#7708)
Record
SUSE-SU-2026:4932-1
Updated
2026-11-02

Affected products

Show 4 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
389-ds-base
Azure Linux:3
 through 3.1.1-12 None known
389-ds-base
Debian:12
 All versions, plus listed versions
2.3.1+dfsg1-12.3.1+dfsg1-1+deb12u12.3.4+dfsg1-12.3.4+dfsg1-1.12.4.4+dfsg1-1
Show 13 moreShow less
2.4.4+dfsg1-32.4.5+dfsg1-13.0.2+dfsg1-13.1.1+dfsg1-13.1.1+dfsg1-23.1.1+dfsg1-33.1.2+dfsg1-13.1.2+vendor1-13.1.2+vendor1-23.3.0-13.3.0-23.3.1-13.3.1-3
 None known
389-ds-base
Debian:13
 All versions, plus listed versions
3.1.2+dfsg1-13.1.2+dfsg1-1+deb13u13.1.2+vendor1-13.1.2+vendor1-23.3.0-13.3.0-23.3.1-13.3.1-3
 None known
389-ds-base
Red Hat:directory_server:13.2::el10
 before 0:3.2.0-7.el10dsrv
0:3.2.0-7.el10dsrv
cockpit-389-ds
Red Hat:directory_server:13.2::el10
 before 0:3.2.0-7.el10dsrv
0:3.2.0-7.el10dsrv
389-ds-base
Red Hat:directory_server_e2s:13.0::el10
 before 0:3.0.6-4.el10dsrv
0:3.0.6-4.el10dsrv
cockpit-389-ds
Red Hat:directory_server_e2s:13.0::el10
 before 0:3.0.6-4.el10dsrv
0:3.0.6-4.el10dsrv
389-ds-base
Red Hat:directory_server_e4s:12.2::el9
From an advisory covering 5 CVEs
 before 0:2.2.7-18.module+el9dsrv+24814+6d9b6eb5
0:2.2.7-18.module+el9dsrv+24814+6d9b6eb5
389-ds-base-debuginfo
Red Hat:directory_server_e4s:12.2::el9
From an advisory covering 5 CVEs
 before 0:2.2.7-18.module+el9dsrv+24814+6d9b6eb5
0:2.2.7-18.module+el9dsrv+24814+6d9b6eb5
389-ds-base-debugsource
Red Hat:directory_server_e4s:12.2::el9
From an advisory covering 5 CVEs
 before 0:2.2.7-18.module+el9dsrv+24814+6d9b6eb5
0:2.2.7-18.module+el9dsrv+24814+6d9b6eb5
Show 75 moreShow less
Affected packages
PackageAffectedFixed
389-ds-base-devel
Red Hat:directory_server_e4s:12.2::el9
From an advisory covering 5 CVEs
 before 0:2.2.7-18.module+el9dsrv+24814+6d9b6eb5
0:2.2.7-18.module+el9dsrv+24814+6d9b6eb5
389-ds-base-libs
Red Hat:directory_server_e4s:12.2::el9
From an advisory covering 5 CVEs
 before 0:2.2.7-18.module+el9dsrv+24814+6d9b6eb5
0:2.2.7-18.module+el9dsrv+24814+6d9b6eb5
389-ds-base-libs-debuginfo
Red Hat:directory_server_e4s:12.2::el9
From an advisory covering 5 CVEs
 before 0:2.2.7-18.module+el9dsrv+24814+6d9b6eb5
0:2.2.7-18.module+el9dsrv+24814+6d9b6eb5
389-ds-base-snmp
Red Hat:directory_server_e4s:12.2::el9
From an advisory covering 5 CVEs
 before 0:2.2.7-18.module+el9dsrv+24814+6d9b6eb5
0:2.2.7-18.module+el9dsrv+24814+6d9b6eb5
389-ds-base-snmp-debuginfo
Red Hat:directory_server_e4s:12.2::el9
From an advisory covering 5 CVEs
 before 0:2.2.7-18.module+el9dsrv+24814+6d9b6eb5
0:2.2.7-18.module+el9dsrv+24814+6d9b6eb5
cockpit-389-ds
Red Hat:directory_server_e4s:12.2::el9
From an advisory covering 5 CVEs
 before 0:2.2.7-18.module+el9dsrv+24814+6d9b6eb5
0:2.2.7-18.module+el9dsrv+24814+6d9b6eb5
python3-lib389
Red Hat:directory_server_e4s:12.2::el9
From an advisory covering 5 CVEs
 before 0:2.2.7-18.module+el9dsrv+24814+6d9b6eb5
0:2.2.7-18.module+el9dsrv+24814+6d9b6eb5
389-ds-base
Red Hat:directory_server_e4s:12.4::el9
From an advisory covering 5 CVEs
 before 0:2.4.5-26.module+el9dsrv+24813+95aeb06d
0:2.4.5-26.module+el9dsrv+24813+95aeb06d
389-ds-base-debuginfo
Red Hat:directory_server_e4s:12.4::el9
From an advisory covering 5 CVEs
 before 0:2.4.5-26.module+el9dsrv+24813+95aeb06d
0:2.4.5-26.module+el9dsrv+24813+95aeb06d
389-ds-base-debugsource
Red Hat:directory_server_e4s:12.4::el9
From an advisory covering 5 CVEs
 before 0:2.4.5-26.module+el9dsrv+24813+95aeb06d
0:2.4.5-26.module+el9dsrv+24813+95aeb06d
389-ds-base-devel
Red Hat:directory_server_e4s:12.4::el9
From an advisory covering 5 CVEs
 before 0:2.4.5-26.module+el9dsrv+24813+95aeb06d
0:2.4.5-26.module+el9dsrv+24813+95aeb06d
389-ds-base-libs
Red Hat:directory_server_e4s:12.4::el9
From an advisory covering 5 CVEs
 before 0:2.4.5-26.module+el9dsrv+24813+95aeb06d
0:2.4.5-26.module+el9dsrv+24813+95aeb06d
389-ds-base-libs-debuginfo
Red Hat:directory_server_e4s:12.4::el9
From an advisory covering 5 CVEs
 before 0:2.4.5-26.module+el9dsrv+24813+95aeb06d
0:2.4.5-26.module+el9dsrv+24813+95aeb06d
389-ds-base-snmp
Red Hat:directory_server_e4s:12.4::el9
From an advisory covering 5 CVEs
 before 0:2.4.5-26.module+el9dsrv+24813+95aeb06d
0:2.4.5-26.module+el9dsrv+24813+95aeb06d
389-ds-base-snmp-debuginfo
Red Hat:directory_server_e4s:12.4::el9
From an advisory covering 5 CVEs
 before 0:2.4.5-26.module+el9dsrv+24813+95aeb06d
0:2.4.5-26.module+el9dsrv+24813+95aeb06d
cockpit-389-ds
Red Hat:directory_server_e4s:12.4::el9
From an advisory covering 5 CVEs
 before 0:2.4.5-26.module+el9dsrv+24813+95aeb06d
0:2.4.5-26.module+el9dsrv+24813+95aeb06d
python3-lib389
Red Hat:directory_server_e4s:12.4::el9
From an advisory covering 5 CVEs
 before 0:2.4.5-26.module+el9dsrv+24813+95aeb06d
0:2.4.5-26.module+el9dsrv+24813+95aeb06d
389-ds-base
Red Hat:directory_server_eus:12.6::el9
 before 0:2.6.1-4.module+el9dsrv+24810+65883465
0:2.6.1-4.module+el9dsrv+24810+65883465
cockpit-389-ds
Red Hat:directory_server_eus:12.6::el9
 before 0:2.6.1-4.module+el9dsrv+24810+65883465
0:2.6.1-4.module+el9dsrv+24810+65883465
389-ds-base
Red Hat:directory_server_e4s:11.7::el8
From an advisory covering 5 CVEs
 before 0:1.4.3.34-18.module+el8dsrv+24812+0acb1821
0:1.4.3.34-18.module+el8dsrv+24812+0acb1821
389-ds-base-debuginfo
Red Hat:directory_server_e4s:11.7::el8
From an advisory covering 5 CVEs
 before 0:1.4.3.34-18.module+el8dsrv+24812+0acb1821
0:1.4.3.34-18.module+el8dsrv+24812+0acb1821
389-ds-base-debugsource
Red Hat:directory_server_e4s:11.7::el8
From an advisory covering 5 CVEs
 before 0:1.4.3.34-18.module+el8dsrv+24812+0acb1821
0:1.4.3.34-18.module+el8dsrv+24812+0acb1821
389-ds-base-devel
Red Hat:directory_server_e4s:11.7::el8
From an advisory covering 5 CVEs
 before 0:1.4.3.34-18.module+el8dsrv+24812+0acb1821
0:1.4.3.34-18.module+el8dsrv+24812+0acb1821
389-ds-base-legacy-tools
Red Hat:directory_server_e4s:11.7::el8
From an advisory covering 5 CVEs
 before 0:1.4.3.34-18.module+el8dsrv+24812+0acb1821
0:1.4.3.34-18.module+el8dsrv+24812+0acb1821
389-ds-base-legacy-tools-debuginfo
Red Hat:directory_server_e4s:11.7::el8
From an advisory covering 5 CVEs
 before 0:1.4.3.34-18.module+el8dsrv+24812+0acb1821
0:1.4.3.34-18.module+el8dsrv+24812+0acb1821
389-ds-base-libs
Red Hat:directory_server_e4s:11.7::el8
From an advisory covering 5 CVEs
 before 0:1.4.3.34-18.module+el8dsrv+24812+0acb1821
0:1.4.3.34-18.module+el8dsrv+24812+0acb1821
389-ds-base-libs-debuginfo
Red Hat:directory_server_e4s:11.7::el8
From an advisory covering 5 CVEs
 before 0:1.4.3.34-18.module+el8dsrv+24812+0acb1821
0:1.4.3.34-18.module+el8dsrv+24812+0acb1821
389-ds-base-snmp
Red Hat:directory_server_e4s:11.7::el8
From an advisory covering 5 CVEs
 before 0:1.4.3.34-18.module+el8dsrv+24812+0acb1821
0:1.4.3.34-18.module+el8dsrv+24812+0acb1821
389-ds-base-snmp-debuginfo
Red Hat:directory_server_e4s:11.7::el8
From an advisory covering 5 CVEs
 before 0:1.4.3.34-18.module+el8dsrv+24812+0acb1821
0:1.4.3.34-18.module+el8dsrv+24812+0acb1821
cockpit-389-ds
Red Hat:directory_server_e4s:11.7::el8
From an advisory covering 5 CVEs
 before 0:1.4.3.34-18.module+el8dsrv+24812+0acb1821
0:1.4.3.34-18.module+el8dsrv+24812+0acb1821
python3-lib389
Red Hat:directory_server_e4s:11.7::el8
From an advisory covering 5 CVEs
 before 0:1.4.3.34-18.module+el8dsrv+24812+0acb1821
0:1.4.3.34-18.module+el8dsrv+24812+0acb1821
389-ds-base
Red Hat:directory_server:11.9::el8
From an advisory covering 5 CVEs
 before 0:1.4.3.39-28.module+el8dsrv+24826+9ffa737d
0:1.4.3.39-28.module+el8dsrv+24826+9ffa737d
389-ds-base-debuginfo
Red Hat:directory_server:11.9::el8
From an advisory covering 5 CVEs
 before 0:1.4.3.39-28.module+el8dsrv+24826+9ffa737d
0:1.4.3.39-28.module+el8dsrv+24826+9ffa737d
389-ds-base-debugsource
Red Hat:directory_server:11.9::el8
From an advisory covering 5 CVEs
 before 0:1.4.3.39-28.module+el8dsrv+24826+9ffa737d
0:1.4.3.39-28.module+el8dsrv+24826+9ffa737d
389-ds-base-devel
Red Hat:directory_server:11.9::el8
From an advisory covering 5 CVEs
 before 0:1.4.3.39-28.module+el8dsrv+24826+9ffa737d
0:1.4.3.39-28.module+el8dsrv+24826+9ffa737d
389-ds-base-legacy-tools
Red Hat:directory_server:11.9::el8
From an advisory covering 5 CVEs
 before 0:1.4.3.39-28.module+el8dsrv+24826+9ffa737d
0:1.4.3.39-28.module+el8dsrv+24826+9ffa737d
389-ds-base-legacy-tools-debuginfo
Red Hat:directory_server:11.9::el8
From an advisory covering 5 CVEs
 before 0:1.4.3.39-28.module+el8dsrv+24826+9ffa737d
0:1.4.3.39-28.module+el8dsrv+24826+9ffa737d
389-ds-base-libs
Red Hat:directory_server:11.9::el8
From an advisory covering 5 CVEs
 before 0:1.4.3.39-28.module+el8dsrv+24826+9ffa737d
0:1.4.3.39-28.module+el8dsrv+24826+9ffa737d
389-ds-base-libs-debuginfo
Red Hat:directory_server:11.9::el8
From an advisory covering 5 CVEs
 before 0:1.4.3.39-28.module+el8dsrv+24826+9ffa737d
0:1.4.3.39-28.module+el8dsrv+24826+9ffa737d
389-ds-base-snmp
Red Hat:directory_server:11.9::el8
From an advisory covering 5 CVEs
 before 0:1.4.3.39-28.module+el8dsrv+24826+9ffa737d
0:1.4.3.39-28.module+el8dsrv+24826+9ffa737d
389-ds-base-snmp-debuginfo
Red Hat:directory_server:11.9::el8
From an advisory covering 5 CVEs
 before 0:1.4.3.39-28.module+el8dsrv+24826+9ffa737d
0:1.4.3.39-28.module+el8dsrv+24826+9ffa737d
cockpit-389-ds
Red Hat:directory_server:11.9::el8
From an advisory covering 5 CVEs
 before 0:1.4.3.39-28.module+el8dsrv+24826+9ffa737d
0:1.4.3.39-28.module+el8dsrv+24826+9ffa737d
python3-lib389
Red Hat:directory_server:11.9::el8
From an advisory covering 5 CVEs
 before 0:1.4.3.39-28.module+el8dsrv+24826+9ffa737d
0:1.4.3.39-28.module+el8dsrv+24826+9ffa737d
389-ds-base
Red Hat:directory_server:12.8::el9
 before 0:2.8.0-7.module+el9dsrv+24844+8988a132
0:2.8.0-7.module+el9dsrv+24844+8988a132
cockpit-389-ds
Red Hat:directory_server:12.8::el9
 before 0:2.8.0-7.module+el9dsrv+24844+8988a132
0:2.8.0-7.module+el9dsrv+24844+8988a132
389-ds-base
Red Hat:directory_server_e4s:11.5::el8
From an advisory covering 8 CVEs
 before 0:1.4.3.34-9.module+el8dsrv+24847+c94540a6
0:1.4.3.34-9.module+el8dsrv+24847+c94540a6
389-ds-base-debuginfo
Red Hat:directory_server_e4s:11.5::el8
From an advisory covering 8 CVEs
 before 0:1.4.3.34-9.module+el8dsrv+24847+c94540a6
0:1.4.3.34-9.module+el8dsrv+24847+c94540a6
389-ds-base-debugsource
Red Hat:directory_server_e4s:11.5::el8
From an advisory covering 8 CVEs
 before 0:1.4.3.34-9.module+el8dsrv+24847+c94540a6
0:1.4.3.34-9.module+el8dsrv+24847+c94540a6
389-ds-base-devel
Red Hat:directory_server_e4s:11.5::el8
From an advisory covering 8 CVEs
 before 0:1.4.3.34-9.module+el8dsrv+24847+c94540a6
0:1.4.3.34-9.module+el8dsrv+24847+c94540a6
389-ds-base-legacy-tools
Red Hat:directory_server_e4s:11.5::el8
From an advisory covering 8 CVEs
 before 0:1.4.3.34-9.module+el8dsrv+24847+c94540a6
0:1.4.3.34-9.module+el8dsrv+24847+c94540a6
389-ds-base-legacy-tools-debuginfo
Red Hat:directory_server_e4s:11.5::el8
From an advisory covering 8 CVEs
 before 0:1.4.3.34-9.module+el8dsrv+24847+c94540a6
0:1.4.3.34-9.module+el8dsrv+24847+c94540a6
389-ds-base-libs
Red Hat:directory_server_e4s:11.5::el8
From an advisory covering 8 CVEs
 before 0:1.4.3.34-9.module+el8dsrv+24847+c94540a6
0:1.4.3.34-9.module+el8dsrv+24847+c94540a6
389-ds-base-libs-debuginfo
Red Hat:directory_server_e4s:11.5::el8
From an advisory covering 8 CVEs
 before 0:1.4.3.34-9.module+el8dsrv+24847+c94540a6
0:1.4.3.34-9.module+el8dsrv+24847+c94540a6
389-ds-base-snmp
Red Hat:directory_server_e4s:11.5::el8
From an advisory covering 8 CVEs
 before 0:1.4.3.34-9.module+el8dsrv+24847+c94540a6
0:1.4.3.34-9.module+el8dsrv+24847+c94540a6
389-ds-base-snmp-debuginfo
Red Hat:directory_server_e4s:11.5::el8
From an advisory covering 8 CVEs
 before 0:1.4.3.34-9.module+el8dsrv+24847+c94540a6
0:1.4.3.34-9.module+el8dsrv+24847+c94540a6
cockpit-389-ds
Red Hat:directory_server_e4s:11.5::el8
From an advisory covering 8 CVEs
 before 0:1.4.3.34-9.module+el8dsrv+24847+c94540a6
0:1.4.3.34-9.module+el8dsrv+24847+c94540a6
python3-lib389
Red Hat:directory_server_e4s:11.5::el8
From an advisory covering 8 CVEs
 before 0:1.4.3.34-9.module+el8dsrv+24847+c94540a6
0:1.4.3.34-9.module+el8dsrv+24847+c94540a6
389-ds
SUSE:Linux Enterprise Server 16.0
From an advisory covering 6 CVEs
 before 3.0.7~git2.2846d5288-160000.1.1
3.0.7~git2.2846d5288-160000.1.1
389-ds
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 6 CVEs
 before 3.0.7~git2.2846d5288-160000.1.1
3.0.7~git2.2846d5288-160000.1.1
389-ds
SUSE:Linux Enterprise Module for Server Applications 15 SP7
From an advisory covering 6 CVEs
 before 2.8.2~git10.030ada7a6-150700.3.25.1
2.8.2~git10.030ada7a6-150700.3.25.1
389-ds
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 8 CVEs
 before 2.2.11~git12.1e612cde2-150600.8.38.1
2.2.11~git12.1e612cde2-150600.8.38.1
389-ds
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 8 CVEs
 before 2.2.11~git12.1e612cde2-150600.8.38.1
2.2.11~git12.1e612cde2-150600.8.38.1
389-ds
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 8 CVEs
 before 2.2.11~git12.1e612cde2-150500.3.54.1
2.2.11~git12.1e612cde2-150500.3.54.1
389-ds
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 8 CVEs
 before 2.2.11~git12.1e612cde2-150500.3.54.1
2.2.11~git12.1e612cde2-150500.3.54.1
389-ds
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 8 CVEs
 before 2.2.11~git12.1e612cde2-150500.3.54.1
2.2.11~git12.1e612cde2-150500.3.54.1
389-ds
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 8 CVEs
 before 2.2.11~git12.1e612cde2-150500.3.54.1
2.2.11~git12.1e612cde2-150500.3.54.1
389-ds-base
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.3.3.12-1build11.3.3.13-11.3.4.5-21.3.4.8-11.3.4.8-3
Show 4 moreShow less
1.3.4.8-3ubuntu11.3.4.8-41.3.4.9-11.3.4.9-1ubuntu0.1~esm1
 None known
389-ds-base
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.3.7.5-11.3.7.5-1build11.3.7.5-1build21.3.7.9-11.3.7.10-11.3.7.10-1ubuntu11.3.7.10-1ubuntu1+esm1
 None known
389-ds-base
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
1.4.1.6-41.4.1.6-4build11.4.2.4-11.4.2.4-1build11.4.3.2-11.4.3.2-1build11.4.3.6-21.4.3.6-2ubuntu0.1~esm1
 None known
389-ds-base
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.4.4.11-2build11.4.4.11-2build21.4.4.17-12.0.11-22.0.14-12.0.15-12.0.15-1ubuntu2
 None known
389-ds-base
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.3.4+dfsg1-12.4.4+dfsg1-1ubuntu12.4.4+dfsg1-1ubuntu42.4.4+dfsg1-32.4.5+dfsg1-1
 None known
389-ds-base
Ubuntu:26.10
 All versions, plus listed versions
3.1.2+vendor1-23.1.2+vendor1-2build13.3.1-3
 None known
389-ds-base
Ubuntu:26.04:LTS
 All versions, plus listed versions
3.1.2+dfsg1-13.1.2+vendor1-2
 None known
389-ds
openSUSE:Tumbleweed
From an advisory covering 8 CVEs
 before 3.3.1+8c2711bd6-1.1
3.3.1+8c2711bd6-1.1
389-ds
openSUSE:Leap 16.0
From an advisory covering 6 CVEs
 before 3.0.7~git2.2846d5288-160000.1.1
3.0.7~git2.2846d5288-160000.1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubgduma-phData/patch-CVE-2026-198432026-08-24

History

History
RecordedChangedSources
affectedCVE List, EUVD, NVD, OSV
factsEUVD
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-19843 is a high vulnerability (CVSS 8.4) in Red Hat Directory Server 11, published September 7, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.48%, the 41st percentile. Fixed in 389-ds-base 0:3.2.0-7.el10dsrv.

References

Show 74 moreShow less
This page doesn't list everything

Left out here: the rest of 1 source description. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open