Apache Directory LDAP API

Search everything

Mentions · 7d0
Mentions · 30d6
All mentions6
First seenOct 2, 2026
Last mentioned28d ago

Timeline

6 articles · newest first

CVE-2026-103885: Apache Directory LDAP API: Denial of service via crafted telephone number values

CVE-2026-103885 lets crafted telephone numbers pin a CPU core in Apache Directory LDAP API before 2.1.9.

oss-securityOct 2, 19:34 UTC · 28d agoVulnerability 6 sourcesCVE-2026-1038851

CVE-2026-103880: Apache Directory LDAP API: Denial of service via excessive bcrypt cost factor in stored passwords

CVE-2026-103880 lets extreme bcrypt cost factors stall Apache Directory LDAP API servers for hours.

oss-securityOct 2, 19:32 UTC · 28d agoVulnerability 6 sourcesCVE-2026-1038802 · 1 read

CVE-2026-103878: Apache Directory LDAP API: Injection of plaintext responses during StartTLS

Apache Directory LDAP API versions before 2.1.9 can leak plaintext responses when StartTLS follows a search.

oss-securityOct 2, 19:30 UTC · 28d agoVulnerability 6 sourcesCVE-2026-1038782 · 1 read

CVE-2026-103877: Apache Directory LDAP API: Unsafe loading of Java code from LDAP schema elements

Apache Directory LDAP API before 2.1.9 can deserialize Java from a rogue LDAP schema, enabling potential remote code execution.

oss-securityOct 2, 19:28 UTC · 28d agoVulnerability 6 sourcesCVE-2026-1038773

CVE-2026-103552: Apache Directory LDAP API: A unbound client can send a deeply nested search filter that overflows the stack in the server's decoder

Unbound clients can crash Apache Directory LDAP API before 1.2.9 with a deeply nested search filter.

oss-securityOct 2, 19:26 UTC · 28d agoVulnerability 6 sourcesCVE-2026-1035522 · 1 read

CVE-2026-102731: Apache Directory LDAP API: Denial of service via excessive memory allocation in BER decode

A tiny BER response can exhaust memory in Apache Directory LDAP API before 1.2.9, causing denial of service.

oss-securityupdated Oct 2, 19:34 UTC · 28d agofirst Oct 2, 19:24 UTC · 28d agoVulnerability 6 sourcesCVE-2026-1027311 · 1 read

Related CVEs

by mentions

CVE-2026-1038779.8
Unsafe Java deserialization in Apache Directory LDAP API
published 28d agoApache Directory LDAP API
CVE-2026-1038857.5
CPU exhaustion DoS in Apache Directory LDAP API
published 28d agoApache Software Foundation Apache Directory LDAP API
CVE-2026-1027317.5
Memory-exhaustion DoS in Apache Directory LDAP API
published 28d agoApache Software Foundation Apache Directory LDAP API
CVE-2026-1038787.5
Cleartext responses during StartTLS in Apache Directory LDAP API
published 28d agoApache Software Foundation Apache Directory LDAP API
CVE-2026-1038807.5
DoS via excessive bcrypt cost in Apache Directory LDAP API
published 28d agoApache Software Foundation Apache Directory LDAP API
CVE-2026-1035527.3
Stack Overflow in Apache Directory LDAP API Before Bind
published 28d agoApache Directory LDAP API

Appears with

Apache Software Foundationorganization · 6
Apache Software Foundationvendor · 5
Apachevendor · 1
ApacheDSproduct · 1

Entities are extracted by the model from each article. First seen Oct 2, 2026, last mentioned 28d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.