SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-18453

HIGH · CVSS 7.5 EPSS 0.85%

Source: NVD + CISA KEV + EPSS · Published 2026-09-07 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A vulnerability exists in the paged results handling of 389 Directory Server, where a missing NULL pointer check can be exploited by unauthenticated remote attackers. By sending specially crafted search requests with the USE_ONE_BACKEND control, an attacker can crash the LDAP server, leading to a denial of service. Organizations using 389 Directory Server should prioritize patching this flaw to mitigate potential disruptions.

CVE
CVE-2026-18453
Severity
HIGH
CVSS
7.5
EPSS
0.85%

Original NVD Description

A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of op_shared_search allows an unauthenticated remote attacker to crash the LDAP server by sending a crafted sequence of search requests using the USE_ONE_BACKEND control, resulting in denial of service.