CVE-2026-15722

A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...

CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing

A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...

CVE-2026-15722

The CVE-2026-15722 entry concerns a pre-authentication stack buffer overflow in 389-ds-base. The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking, allowing a remote unauthentic...

CVE-2026-15722

A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...

CVE-2026-43833

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43831

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43829

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43833 tbc

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43833

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43833

CVE-2026-43833 has concrete details in PT-security PT-2026-66675, which reports a stack-based buffer overflow in the upload functionality that allows code execution via a successful exploitation by an authenticated attacker. The CVSS data in the Initial document indicates NETWORK attack vector, l...

EUVD-2026-51390

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43832

CVE-2026-43832 has connected details from PT-2026-66674 describing a stack-based buffer overflow in the Cookie parsing methods that could allow code execution when the SafeEnhancement feature is enabled. The exploitation is described as unauthenticated. No remediation steps or affected product ve...

CVE-2026-43832

Full details and mitigation steps are currently restricted and will be published at a later date...

EUVD-2026-51389

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43832 tbc

Full details and mitigation steps are currently restricted and will be published at a later date...

EUVD-2026-51387

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43831

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43831 tbc

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43831

CVE-2026-43831 has a connected PT-2026-66673 entry describing a stack-based buffer overflow in the log message functionality that can be exploited by an unauthenticated attacker to achieve code execution. The initial documents provide a CVSSv3.1 base score of 7.5 (HIGH) with network attack vector...

CVE-2026-43829

Technical details for CVE-2026-43829 are not publicly available in the provided documents. No affected products, root cause, impact, or fixes are specified. Monitor for updates as more information is published.