Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2026-20746

PingDirectory copying of virtual attributes leads to memory exhaustion

Medium6.3EPSS 0.28%
Published
Updated
Reserved
Assigned by
Ping Identity

Description

Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java memory heap when recent login history is enabled and copying virtual attributes that reference ds-privilege-name values.

Scores

CVSS scores of CVE-2026-20746, by who scored it
Scored byCVSSScoreVector
Ping IdentityCNA (assigner)4.0Medium6.3CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:L/SC:H/SI:H/SA:H/S:P/AU:Y/R:U/RE:M/U:Amber
NVDNVD · Awaiting Analysis4.0Medium6.3CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:U/V:X/RE:M/U:Amber
EPSS (exploitation in 30 days)
0.28% · top 80% of all CVEs (6 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.3.

Weakness

Affected products

  • Ping Identity · PingDirectory

    • affected 9.3.0.0 – ≤ 9.3.0.8
    • affected 10.1.0.0 – ≤ 10.1.0.5
    • affected 10.2.0.0 – ≤ 10.2.0.5
    • affected 10.3.0.0 – ≤ 10.3.0.3
    • affected 11.0.0.0 – < 11.0.0.1

References (3)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2026-20746 badge
[![CVE-2026-20746](https://trackcve.app/badge/CVE-2026-20746.svg)](https://trackcve.app/cve/CVE-2026-20746)

Record last updated .