CVE-2026-18922Published
389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary property
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-18922 · Microsoft / collected KEV context
cve-program · CVE-2026-18922
- https://access.redhat.com/errata/RHSA-2026:64771
- https://access.redhat.com/errata/RHSA-2026:64776
- https://access.redhat.com/errata/RHSA-2026:64778
- https://access.redhat.com/errata/RHSA-2026:64779
- https://access.redhat.com/errata/RHSA-2026:64780
- https://access.redhat.com/errata/RHSA-2026:64781
- https://access.redhat.com/errata/RHSA-2026:64783
- https://access.redhat.com/errata/RHSA-2026:64784
- https://access.redhat.com/errata/RHSA-2026:64785
- https://access.redhat.com/errata/RHSA-2026:64789
- https://access.redhat.com/errata/RHSA-2026:64790
- https://access.redhat.com/errata/RHSA-2026:64791
- https://access.redhat.com/errata/RHSA-2026:64792
- https://access.redhat.com/errata/RHSA-2026:64793
- https://access.redhat.com/errata/RHSA-2026:64804
- https://access.redhat.com/errata/RHSA-2026:64811
- https://access.redhat.com/errata/RHSA-2026:79217
- https://access.redhat.com/security/cve/CVE-2026-18922
- https://bugzilla.redhat.com/show_bug.cgi?id=2511388
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.