CVE-2026-73199

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description A null pointer dereference issue exists in the ipa-enrollment SLAPI plugin. A remote authenticated client can trigger a server crash, leading to a denial of service, by sending a malformed Lightweight Directory Access Protocol (LDAP) extended operation. This occurs when the request value for the JOIN OID variable is omitted in the ipa-enrollment extended operation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.