Threats Tagged 'cve-2026-19404'

A vulnerability in 389 Directory Server allows unauthenticated remote attackers to invoke certain replication-maintenance operations without authorization when anonymous access is enabled by default. Authenticated low-privilege users can also invoke these operations regardless of privilege. This flaw can lead to removal of replica IDs from replication metadata, purging of changelog records, and interruption of administrator-initiated cleanup, potentially causing replication inconsistencies or unavailability.

CVE-2026-19404 is a medium severity vulnerability in Red Hat Directory Server 11 (389 Directory Server) where the CleanAllRUV and Abort CleanAllRUV replication-maintenance extended operations lack authorization checks. This flaw allows unauthenticated remote attackers to invoke these operations if anonymous access is enabled (the default), or any authenticated user regardless of privilege to invoke them otherwise. Exploitation can remove replica IDs from replication metadata, purge changelog records, and interrupt administrator cleanup processes, potentially causing replication inconsistency or unavailability.