High severity7.5NVD Advisory· Published Jul 31, 2026· Updated Aug 18, 2026
CVE-2026-11770
CVE-2026-11770
Description
A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean match result, the attacker can extract sensitive server configuration metadata, including replication bind DNs and password storage scheme information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
17cpe:2.3:a:redhat:directory_server:11.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:redhat:directory_server:11.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:directory_server:12.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:directory_server:13.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:389_directory_server:-:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
- osv-coords8 versionspkg:rpm/almalinux/389-ds-basepkg:rpm/almalinux/389-ds-base-bdbpkg:rpm/almalinux/389-ds-base-develpkg:rpm/almalinux/389-ds-base-legacy-toolspkg:rpm/almalinux/389-ds-base-libspkg:rpm/almalinux/389-ds-base-snmppkg:rpm/almalinux/python3-lib389pkg:rpm/opensuse/389-ds&distro=openSUSE%20Tumbleweed
< 2.8.0-9.el9_8+ 7 more
- (no CPE)range: < 2.8.0-9.el9_8
- (no CPE)range: < 3.2.0-9.el10_2
- (no CPE)range: < 2.8.0-9.el9_8
- (no CPE)range: < 1.4.3.39-26.module_el8.10.0+4254+e9c4b400
- (no CPE)range: < 2.8.0-9.el9_8
- (no CPE)range: < 2.8.0-9.el9_8
- (no CPE)range: < 2.8.0-9.el9_8
- (no CPE)range: < 3.3.1+8c2711bd6-1.1
Patches
Vulnerability mechanics
References
18- access.redhat.com/security/cve/CVE-2026-11770nvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor Advisory
- github.com/389ds/389-ds-base/blob/main/ldap/servers/plugins/replication/repl_extop.cnvdProduct
- access.redhat.com/errata/RHSA-2026:55421nvd
- access.redhat.com/errata/RHSA-2026:55422nvd
- access.redhat.com/errata/RHSA-2026:55423nvd
- access.redhat.com/errata/RHSA-2026:55424nvd
- access.redhat.com/errata/RHSA-2026:55425nvd
- access.redhat.com/errata/RHSA-2026:55426nvd
- access.redhat.com/errata/RHSA-2026:55530nvd
- access.redhat.com/errata/RHSA-2026:55532nvd
- access.redhat.com/errata/RHSA-2026:55756nvd
- access.redhat.com/errata/RHSA-2026:55757nvd
- access.redhat.com/errata/RHSA-2026:55758nvd
- access.redhat.com/errata/RHSA-2026:55794nvd
- access.redhat.com/errata/RHSA-2026:56047nvd
- access.redhat.com/errata/RHSA-2026:56048nvd
- access.redhat.com/errata/RHSA-2026:56050nvd
News mentions
0No linked articles in our index yet.