CVE-2026-78701: Red Hat Directory Server 11

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer (SASL) UNBIND process. By sending a specially crafted request, the attacker can cause a connection to stall, leading to resource exhaustion and a Denial of Service (DoS) for the server.

Affected products

• Red Hat Red Hat Directory Server 11
• Red Hat Red Hat Directory Server 12
• Red Hat Red Hat Directory Server 13
• Red Hat Red Hat Directory Server 13.2: before 1788851765 (fixed in 1788851765)
• Red Hat Red Hat Enterprise Linux 10: before 0:3.2.0-10.el10_2 (fixed in 0:3.2.0-10.el10_2)
• Red Hat Red Hat Enterprise Linux 6
• Red Hat Red Hat Enterprise Linux 7
• Red Hat Red Hat Enterprise Linux 8
• Red Hat Red Hat Enterprise Linux 9: before 0:2.8.0-10.el9_8 (fixed in 0:2.8.0-10.el9_8)

Published 2026-08-25. Last modified 2026-10-09.