CVE-2026-18453CWE-476

CVE-2026-18453

High · published September 7, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
57.6
In the wild
Unconfirmed
What it is

A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of op_shared_search allows an unauthenticated remote attacker to crash the LDAP server by sending a crafted sequence of search requests using the USE_ONE_BACKEND control, resulting in denial of service.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00847 · 57.6th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2026-09-07T19:17Z
References (19)
https://access.redhat.com/errata/RHSA-2026:64771 · [email protected]https://access.redhat.com/errata/RHSA-2026:64776 · [email protected]https://access.redhat.com/errata/RHSA-2026:64778 · [email protected]https://access.redhat.com/errata/RHSA-2026:64779 · [email protected]https://access.redhat.com/errata/RHSA-2026:64780 · [email protected]https://access.redhat.com/errata/RHSA-2026:64781 · [email protected]https://access.redhat.com/errata/RHSA-2026:64783 · [email protected]https://access.redhat.com/errata/RHSA-2026:64784 · [email protected]https://access.redhat.com/errata/RHSA-2026:64785 · [email protected]https://access.redhat.com/errata/RHSA-2026:64789 · [email protected]https://access.redhat.com/errata/RHSA-2026:64790 · [email protected]https://access.redhat.com/errata/RHSA-2026:64791 · [email protected]https://access.redhat.com/errata/RHSA-2026:64792 · [email protected]https://access.redhat.com/errata/RHSA-2026:64793 · [email protected]https://access.redhat.com/errata/RHSA-2026:64804 · [email protected]https://access.redhat.com/errata/RHSA-2026:65119 · [email protected]https://access.redhat.com/errata/RHSA-2026:79217 · [email protected]https://access.redhat.com/security/cve/CVE-2026-18453 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2509696 · [email protected]
EPSS history
Timeline
  • 09 SEP 03:18Z
    EPSS moved — → 1%
    epss
  • 07 SEP 14:14Z
    389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search
    cvelistv5