Status: UPDATED | Advisory ID: CVE-2026-103885
| CVE | CVE-2026-103885 |
| Affected products | Apache Software Foundation Apache Directory LDAP API |
| Vendor | Product | Affected Versions | Patch Status |
|---|---|---|---|
| Apache Software Foundation | Apache Directory LDAP API |
| Subsystems | General OT |
| Sectors | Multiple |
Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API.
A LDAP server using the LDAP API (like Apache DS) may consume 100% of a CPU core indefinitely when processing some badly crafted Telephone Numbers.
This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9.
Users are recommended to upgrade to version 2.1.9, which fixes the issue. (NVD)
Monitor Apache Software Foundation's web page for any future patch releases.
| Source | Reference |
|---|---|
| NVD | https://nvd.nist.gov/vuln/detail/CVE-2026-103885 |
| CVE | https://www.cve.org/CVERecord?id=CVE-2026-103885 |