Red Hat Directory Server 13.2 vulnerabilities

6 CVEs affecting Red Hat Directory Server 13.2, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-18453, published 2026-09-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-18453, published 2026-09-07. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of op_shared_search allows an unauthenticated remote attacker to crash the LDAP server by sending…
CVE-2026-18355, published 2026-09-07. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), the wrapped-record length read from the wire is validated only against an…
CVE-2026-78701, published 2026-08-25. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer (SASL) UNBIND process. By sending a specially crafted…
CVE-2026-11774, published 2026-06-11. High severity, CVSS 7.6. EPSS: 0.7% chance of exploitation in the next 30 days. An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), adding sizeof(uint32_t) to a crafted SASL packet length prefix of 0xFFFFFFFC…
CVE-2026-76560, published 2026-09-07. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty stored attribute value, allowing an…
CVE-2026-11610, published 2026-07-07. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). After a successful SASL bind with integrity protection (SSF > 0), an authenticated attacker can send…