CVE-2026-117548

MEDIUM 6.5CVE-2026-117548 · Published 29/10/2026 · updated 29/10/2026

In short

CVE-2026-117548 is a MEDIUM (CVSS 6.5) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.33%, higher than 26.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN (rename) operation uses an attribute's schema alias name (such as "commonName") instead of its canonical name (such as "cn") as the new relative distinguished name. An authenticated attacker with the ModifyDN (rename) permission on the affected entry can use this flaw to crash the directory server, causing a denial of service.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free