Medium severityNVD Advisory· Published Jun 12, 2026· Updated Jun 12, 2026

CVE-2026-20746

Description

Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java memory heap when recent login history is enabled and copying virtual attributes that reference ds-privilege-name values.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Pingidentity/PingDirectoryllm-fuzzy

Patches

Vulnerability mechanics

References

docs.pingidentity.com/pingdirectory/11.0/release_notes/pd_release_notes.htmlnvd
support.pingidentity.com/s/article/SECADV052-Denial-of-Service-via-copying-virtual-attributesnvd
www.pingidentity.com/en/resources/downloads/pingdirectory-downloads.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000