Vendor
high
advisory
Denial of Service Vulnerability in 389-ds-base (CVE-2026-86344)
2 TTPs 1 CVECVE-2026-86344 is a denial-of-service vulnerability in 389-ds-base where an unauthenticated remote attacker can exhaust the server thread pool by sending malformed LDAP messages.
389-ds-base
ldap
authentication-bypass
directory-services
2t
1c
high
advisory
Heap Buffer Overflow in 389 Directory Server SASL I/O Layer
1 TTP 2 CVEsA heap buffer overflow vulnerability in the SASL I/O layer of 389-ds-base allows a remote authenticated attacker to trigger an unsigned subtraction underflow and cause memory corruption.
389-ds-base
1t
2c
critical
advisory
Authentication Bypass in 389 Directory Server via SASL Bind State Confusion
1 TTP 1 CVEA vulnerability in 389 Directory Server allows unauthenticated attackers to elevate privileges by exploiting state confusion during SASL authentication, leading to unauthorized Directory Manager access.
389 Directory Server
authentication-bypass
cve-2026-18922
privilege-escalation
1t
1c