How severe is CVE-2026-11793?

CVE-2026-11793 has a CVSS 3.x base score of 4.9, rated medium severity. It is exploitable over network with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.

Is CVE-2026-11793 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (20th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2026-11793?

CVE-2026-11793 affects Redhat 389 Directory Server. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2026-11793?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2026-11793 have an EU (EUVD) identifier?

Yes. CVE-2026-11793 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2026-35423.

When was CVE-2026-11793 published?

CVE-2026-11793 was published on 2026-06-09 and last updated on 2026-06-30.

CVE-2026-11793

CVE-2026-11793 is a medium-severity vulnerability in Redhat 389 Directory Server with a CVSS 3.x base score of 4.9. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-121.

Key facts

Severity: Medium (CVSS 3.x base score 4.9)
EPSS exploit prediction: 0% (20th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2026-35423
Weakness: CWE-121
Affected product: Redhat 389 Directory Server
Published: 2026-06-09
Last modified: 2026-06-30

Description

A stack buffer overflow flaw was found in 389 Directory Server. The checkPrefix() function in pw.c copies an attacker-controlled algorithm ID into a 256-byte stack buffer without bounds checking when parsing reversible-encrypted attribute values. An attacker with Directory Manager privileges can crash the LDAP server by storing a crafted credential with an oversized algorithm ID. FORTIFY_SOURCE mitigates this to denial of service only.

Frequently asked questions

What is CVE-2026-11793?: A stack buffer overflow flaw was found in 389 Directory Server. The checkPrefix() function in pw.c copies an attacker-controlled algorithm ID into a 256-byte stack buffer without bounds checking when parsing reversible-encrypted attribute values. An attacker with Directory Manager privileges can crash the LDAP server by storing a crafted credential with an oversized algorithm ID. FORTIFY_SOURCE mitigates this to denial of service only.
How severe is CVE-2026-11793?: CVE-2026-11793 has a CVSS 3.x base score of 4.9, rated medium severity. It is exploitable over network with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.
Is CVE-2026-11793 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (20th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2026-11793?: CVE-2026-11793 affects Redhat 389 Directory Server. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2026-11793?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2026-11793 have an EU (EUVD) identifier?: Yes. CVE-2026-11793 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2026-35423.
When was CVE-2026-11793 published?: CVE-2026-11793 was published on 2026-06-09 and last updated on 2026-06-30.

References

EU advisories (EUVD)

https://redhat.atlassian.net/browse/PSIRTSUPT-7600

Affected products (1)

cpe:2.3:o:redhat:389_directory_server:-:*:*:*:*:*:*:*

More vulnerabilities in Redhat 389 Directory Server

CVE-2026-9064 — High (CVSS 7.5): A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function in the LDAP server does not enforce an…
CVE-2022-1949 — High (CVSS 7.5): An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect…
CVE-2010-2222 — High (CVSS 7.5): The _ger_parse_control function in Red Hat Directory Server 8 and the 389 Directory Server allows attackers to cause a…
CVE-2026-11611 — Medium (CVSS 6.5): A flaw was found in 389 Directory Server. The Content Synchronization persistent search plugin allows unbounded memory…
CVE-2024-6237 — Medium (CVSS 6.5): A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server…
CVE-2022-0996 — Medium (CVSS 6.5): A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause…

All CVEs affecting Redhat 389 Directory Server →

Other CWE-121 (Stack-based Buffer Overflow) vulnerabilities

CVE-2026-12848 — Critical (CVSS 10.0): GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and…
CVE-2026-12847 — Critical (CVSS 10.0): GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and…
CVE-2026-12846 — Critical (CVSS 10.0): GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and…
CVE-2026-12485 — Critical (CVSS 10.0): GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and…
CVE-2026-37541 — Critical (CVSS 10.0): Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_gvret.cpp, the length…
CVE-2026-42996 — Critical (CVSS 10.0): JS8Call through 2.3.1 and JS8Call-improved before 3.0 have a stack-based buffer overflow via a radio transmission of…

Browse all CWE-121 (Stack-based Buffer Overflow) vulnerabilities →