Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in 389 Directory Server. The SMD5 password storage plugin performs unsigned integer underflow when computing salt length from a crafted password hash shorter than 16 bytes, causing a buffer over-read that crashes the LDAP server during authentication.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
8 versions affected across 3 products
CVE-2026-11789 Buffer Over-Read in 389 Directory Server SMD5 Password Storage Plugin https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-11789
Post summary
The text merely announces a CVE and links to a vulnerability listing with limited technical detail, lacking evidence of exploitation, patches, or PoC.
8 of 8 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | redhat | 389_directory_server | - | - | - |
| App | redhat | directory_server | 11.0 | - | - |
| App | redhat | directory_server | 12.0 | - | - |
| App | redhat | directory_server | 13.0 | - | - |
| OS | redhat | enterprise_linux | 10.0 | - | - |
| OS | redhat | enterprise_linux | 7.0 | - | - |
| OS | redhat | enterprise_linux | 8.0 | - | - |
| OS | redhat | enterprise_linux | 9.0 | - | - |