Vulnerabilities

TI-2026-66039 CVE-2026-103885 · GHSA-c2cq-mmh3-7wxh

Apache Directory LDAP API: Denial of service via crafted telephone number values

LOW 39

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00433 Published 2026-10-02 Fixed in 2.1.9 CWE-400

TI-2026-66036 CVE-2026-103877 · GHSA-v496-rffp-c5q7

MEDIUM 49

Deserialization of Untrusted Data vulnerability in Apache Directory LDAP API.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00469 Published 2026-10-02 Fixed in 2.1.9 CWE-502

TI-2026-66038 CVE-2026-103880 · GHSA-q4px-5x5j-5p92

LOW 39

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00433 Published 2026-10-02 Partial fix · 2.1.9 CWE-405

TI-2026-66037 CVE-2026-103878 · GHSA-vmxq-hqjm-cxv7

LOW 38

Cleartext transmission of sensitive information vulnerability in Apache Directory LDAP API.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00202 Published 2026-10-02 Partial fix · 2.1.9 CWE-345