CVE-2026-19843

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 8.4EPSS <1%

Published 2026-09-07Updated 2026-09-07

PoC

Vulnerability details

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft a malicious DN containing shell metacharacters. When a Cockpit administrator subsequently views the entry in the 389 Console, the embedded shell command executes with root privileges on the directory server host.

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

CNAredhat

EPSS score history

Sources

2 links

PoC links are not available for guest users. Login to view them.

CVE Organization RedHat Vuln DB

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated