VULNERABILITY INTELLIGENCE

CVE-2026-117889

EPSS probability0.56%

CISA KEVNot currently listed

Published2026-10-27

Last modified2026-10-27

Description

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure.