CVE-2026-11611EPSS p15.7%

CVE-2026-11611CVE-2026-11611

redhat / directory_server

Description

A flaw was found in 389 Directory Server. The Content Synchronization persistent search plugin allows unbounded memory growth when an authenticated client stops reading sync responses, enabling denial of service. Additional race conditions in plugin thread lifecycle can cause crashes during connection teardown or shutdown.

Scoring

CVSS 6.5 ()
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS0.24% probability of exploitation · percentile 15.7% · 2026-08-03T12:00:16Z
Last modified2026-07-23

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-11788
CVE
CVE-2026-11790
CVE
CVE-2026-9064
CVE
CVE-2026-11786
CVE
CVE-2026-11789
CVE
CVE-2026-11787
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.