Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:389directoryserver:389_directory_server:*:*:*:*:*:*:*:*

2 briefs RSS
low advisory

Denial of Service in 389 Directory Server via CVE-2026-18453

An unauthenticated remote attacker can crash the 389 Directory Server by sending crafted LDAP paged search requests, resulting in a denial of service condition.

389 Directory Server
1t 1c
critical advisory

Authentication Bypass in 389 Directory Server via SASL Bind State Confusion

A vulnerability in 389 Directory Server allows unauthenticated attackers to elevate privileges by exploiting state confusion during SASL authentication, leading to unauthorized Directory Manager access.

389 Directory Server authentication-bypass cve-2026-18922 privilege-escalation
1t 1c