CVE-2026-11785: Access of Resource Using Incompatible Type ('Type Confusion') in Red Hat Red Hat Directory Server 11
CVE-2026-11785 is a medium-severity vulnerability in Red Hat Directory Server 11 involving a type confusion flaw in the SSO token extended operation handler. This flaw causes partial stack address information to be disclosed in LDAP responses to authenticated users. The vulnerability does not impact confidentiality beyond this information disclosure, nor does it affect integrity or availability. No official patch or remediation level has been confirmed yet.
AI Analysis
Technical Summary
A type confusion vulnerability exists in the SSO token extended operation handler of Red Hat Directory Server 11 (389 Directory Server). This flaw leads to partial disclosure of stack address information in LDAP responses when accessed by authenticated users. The vulnerability has a CVSS 3.1 base score of 4.3, indicating a medium severity level. No known exploits are reported in the wild. The vendor advisory does not currently specify any patch or remediation status.
Potential Impact
Authenticated users may receive LDAP responses containing partial stack address information due to the type confusion flaw. This information disclosure is limited in scope and does not affect data integrity or availability. The impact is therefore limited to a confidentiality breach of partial memory layout information.
Mitigation Recommendations
Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-11785 for current remediation guidance. No official fix or workaround is currently documented. Until a patch is available, limit access to authenticated users and monitor for updates from Red Hat.
CVE-2026-11785: Access of Resource Using Incompatible Type ('Type Confusion') in Red Hat Red Hat Directory Server 11
Description
CVE-2026-11785 is a medium-severity vulnerability in Red Hat Directory Server 11 involving a type confusion flaw in the SSO token extended operation handler. This flaw causes partial stack address information to be disclosed in LDAP responses to authenticated users. The vulnerability does not impact confidentiality beyond this information disclosure, nor does it affect integrity or availability. No official patch or remediation level has been confirmed yet.
CVSS v3.1
Score 4.3medium
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
A type confusion vulnerability exists in the SSO token extended operation handler of Red Hat Directory Server 11 (389 Directory Server). This flaw leads to partial disclosure of stack address information in LDAP responses when accessed by authenticated users. The vulnerability has a CVSS 3.1 base score of 4.3, indicating a medium severity level. No known exploits are reported in the wild. The vendor advisory does not currently specify any patch or remediation status.
Potential Impact
Authenticated users may receive LDAP responses containing partial stack address information due to the type confusion flaw. This information disclosure is limited in scope and does not affect data integrity or availability. The impact is therefore limited to a confidentiality breach of partial memory layout information.
Mitigation Recommendations
Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-11785 for current remediation guidance. No official fix or workaround is currently documented. Until a patch is available, limit access to authenticated users and monitor for updates from Red Hat.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-06-09T12:52:20.837Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-11785","vendor":"Red Hat"}]
Threat ID: 6a28145b8dd33fbd85364a16
Added to database: 6/9/2026, 1:25:47 PM
Last enriched: 6/9/2026, 1:41:41 PM
Last updated: 6/10/2026, 4:58:10 AM
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.