Critical Authentication Bypass Vulnerability in 389 Directory Server (CVE-2026-18922)
A critical vulnerability (CVE-2026-18922) with a CVSS score of 9.8 has been discovered in the 389 Directory Server, a widely used open-source LDAP server. This flaw allows an attacker to bypass authentication and gain elevated privileges, potentially leading to unauthorized access and control of sensitive directory data. The vulnerability is particularly severe as it can be exploited without any valid credentials. Affected products include various versions of Red Hat Directory Server and Red Hat Enterprise Linux.