Search: CVE-2026-19843

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.4	EPSS 0.5%	CVE-2026-19843Red Hat Directory Server 11.5 E4S for RHEL 8 · OS Command Injection High8.4EPSS 0.5%2026-09-07CVE Database V5CVE-2026-19843 A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft a malicious DN containing shell metacharacters. When a Cockpit administrator subsequently views the entry in the 389 Console, the embedded shell command executes with root privileges on the directory server host. EPSS 0.5%Vulnerability	CVE Database V5	2026-09-07

Page 1 of 1 · 5 duplicate CVE records merged