Critical Security Vulnerability in 389-ds-base and cockpit-389-ds Packages
Summary
RHSA-2026:65375: Red Hat Security Advisory: redhat-ds:12 security update. Affects 389-ds-base versions < 0:2.8.0-7.module+el9dsrv+24844+8988a132. Fixed in 0:2.8.0-7.module+el9dsrv+24844+8988a132. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The 389 Directory Server (389-ds-base) is an open-source LDAP server for Linux, designed to provide a robust and scalable directory service. It supports various directory services and is widely used in enterprise environments. The cockpit-389-ds package provides a web-based interface for managing the 389 Directory Server. Both packages are essential for managing user data and authentication in a secure manner. However, a recent vulnerability has been identified that could potentially compromise the security of systems utilizing these packages.
Vulnerability Detail
The vulnerability, identified as CVE-2026-19843, is a critical security flaw that allows unauthorized access to sensitive data within the 389-ds-base and cockpit-389-ds packages. This issue arises from improper access controls, which could enable an attacker to exploit the system and gain elevated privileges. The ramifications of this vulnerability are severe, as it could lead to data breaches, unauthorized modifications, and overall system compromise. The CVSS score for this vulnerability is 8.4, indicating a high level of risk.
How To Fix
Minimum fixed version
0:2.8.0-7.module+el9dsrv+24844+8988a132
This is the first release that contains the fix.
sudo dnf update 389-ds-baseTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you may restrict access to the affected services until the patch is applied. This can be done by modifying the firewall rules to limit access to trusted IP addresses only.
Conclusion
The identified vulnerability in the 389-ds-base and cockpit-389-ds packages poses a significant risk to system security. It is crucial to apply the necessary updates to mitigate this risk and protect sensitive data. Regular monitoring and timely updates are essential for maintaining system integrity.
See every vulnerability recorded for 389-ds-base →
FAQ
CVE-2026-19843 is a critical security vulnerability affecting the 389-ds-base and cockpit-389-ds packages, allowing unauthorized access to sensitive data.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
The CVSS score for this vulnerability is 8.4, indicating a high level of risk.
If you cannot update the packages right away, consider implementing firewall rules to restrict access to the affected services as a temporary measure.
More information can be found in the Red Hat Security Advisory and on the official CVE database.
Related vulnerabilities
Recent vulnerabilities recorded for 389-ds-base.
