Red Hat Red Hat Directory Server 13.2

• CVE-2026-18453 High 7.5 389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search 0.8%
• CVE-2026-18355 High 7.5 389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet() 0.8%
• CVE-2026-76560 High 7.5 389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn 0.6%
• CVE-2026-78701 Medium 6.5 389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos 0.8%
• CVE-2026-11610 High 8.8 389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbind 0.5%
• CVE-2026-11774 High 7.6 389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow 0.7%
• CVE-2026-9064 High 7.5 389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos) 0.8%