https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-18651.htmlhttps://patchthecve.com/cve/CVE-2026-18651.htmlSun, 09 Aug 2026 13:54:50 +0000MEDIUM 5.4: A flaw was found in 389 Directory Server. During SASL PLAIN authentication, the server installs connection-level bind credentials before performing the account-lock check. If the account is subsequently found to be locked, the bind is reported as failed to the client, but the already-installed authehttps://patchthecve.com/cve/CVE-2026-15722.htmlhttps://patchthecve.com/cve/CVE-2026-15722.htmlThu, 08 Oct 2026 15:17:50 +0000HIGH 7.5: A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash thehttps://patchthecve.com/cve/CVE-2026-11770.htmlhttps://patchthecve.com/cve/CVE-2026-11770.htmlThu, 08 Oct 2026 15:17:47 +0000HIGH 7.5: A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean mahttps://patchthecve.com/cve/CVE-2026-15041.htmlhttps://patchthecve.com/cve/CVE-2026-15041.htmlThu, 09 Jul 2026 19:36:15 +0000LOW 3.7: A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password verification function uses standard memcmp() for comparing password hashes instead of a constant-time comparison function. A remote attacker could potentially use timing measurements of LDAP bind attempts to infer partial hash infohttps://patchthecve.com/cve/CVE-2026-14969.htmlhttps://patchthecve.com/cve/CVE-2026-14969.htmlThu, 09 Jul 2026 20:16:29 +0000MEDIUM 4.4: A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and 3DES-CBC operations, allowing an attacker with privileged filesystem access to detect plaintext equality across encrypted entries by comparing ciphertext blocks.https://patchthecve.com/cve/CVE-2026-14940.htmlhttps://patchthecve.com/cve/CVE-2026-14940.htmlThu, 09 Jul 2026 20:20:52 +0000MEDIUM 5.3: A heap-buffer-overflow flaw was found in 389 Directory Server (389-ds-base). When normalizing a Distinguished Name (DN) that contains a legacy-quoted value encoding a multivalued nested Relative Distinguished Name (RDN), the server can write past the end of a heap allocation while sorting RDN attribhttps://patchthecve.com/cve/CVE-2026-11791.htmlhttps://patchthecve.com/cve/CVE-2026-11791.htmlTue, 30 Jun 2026 11:16:28 +0000MEDIUM 5.0: A flaw was found in 389 Directory Server. During schema reload, the attr_syntax_swap_ht() function unconditionally frees attribute syntax information nodes, bypassing the refcount-based deferred deletion used elsewhere in the attribute syntax subsystem. If an administrator triggers schema reload whihttps://patchthecve.com/cve/CVE-2026-12528.htmlhttps://patchthecve.com/cve/CVE-2026-12528.htmlSun, 28 Jun 2026 00:22:17 +0000MEDIUM 5.4: A flaw was found in 389 Directory Server in the __aclp__normalize_acltxt() function of aclparse.c. A malformed ACI (Access Control Instruction) string can trigger heap-buffer-overflow writes and reads during ACI parsing. The function fails to validate that the ACI keyword has sufficient length after