Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of op_shared_search allows an unauthenticated remote attacker to crash the LDAP server by sending a crafted sequence of search requests using the USE_ONE_BACKEND control, resulting in denial of service.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-09-07 | 1 | Disclosure1 |
| 2026-09-09 | 1 | Patch1 |
🚨 HIGH severity CVE-2026-18453 (CVSS 7.5) affects 389 Directory Server. Unauthenticated remote attackers can crash LDAP servers via crafted search requests—causing denial of service. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/6WP1XfjeE1
Post summary
The tweet announces a high‑severity CVE that can cause a denial of service in 389 Directory Server and urges users to patch immediately.
CVE-2026-18453 A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of op_shared_search allows an unauthenticated remote attacker to … https://www.cve.org/CVERecord?id=CVE-2026-18453
Post summary
The passage announces a vulnerability in 389 Directory Server involving a missing NULL pointer check, but offers no PoC, exploit, patch, or evidence of active exploitation.