Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in 389 Directory Server. During SASL PLAIN authentication, the server installs connection-level bind credentials before performing the account-lock check. If the account is subsequently found to be locked, the bind is reported as failed to the client, but the already-installed authenticated state on the connection is not reverted. A client that supplies valid credentials for an account that has been administratively locked can continue to use the same connection with that account's privileges, defeating account lock as an access-revocation control.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
8 versions affected across 3 products
A new vulnerability with increased severity was disclosed for Red Hat Directory Server and Enterprise Linux (CVE-2026-18651) https://vuldb.com/vuln/385607
Post summary
The post announces a newly disclosed CVE (CVE-2026‑18651) for Red Hat Directory Server and Enterprise Linux, noting increased severity but providing no other technical or exploit details.
8 of 8 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | redhat | 389_directory_server | - | - | - |
| App | redhat | directory_server | 11.0 | - | - |
| App | redhat | directory_server | 12.0 | - | - |
| App | redhat | directory_server | 13.0 | - | - |
| OS | redhat | enterprise_linux | 10.0 | - | - |
| OS | redhat | enterprise_linux | 7.0 | - | - |
| OS | redhat | enterprise_linux | 8.0 | - | - |
| OS | redhat | enterprise_linux | 9.0 | - | - |