DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Enterprise Linux (FreeIPA): Mehrere Schwachstellen
view advisory published 2026-09-23
Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Denial-of-Service-Zustände herbeizuführen, Cross-Site-Scripting-Angriffe durchzuführen, Informationen offenzulegen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen und Berechtigungen zu erweitern (einschließlich des Erwerbs von Administratorrechten).
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-18147US | high8.1 | — | ||
A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting (XSS) vulnerability in the FreeIPA/IdM Web UI password reset page. By entic… | ||||
| CVE-2026-79678US | high8.1 | — | ||
A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access… | ||||
| CVE-2026-76578US | critical9.8OT high | Exploit | ||
A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not restrict which attributes may be added alongside the token entry. An unauth… | ||||
| CVE-2026-73198US | — | — | ||
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the `/ipa/i18n_messages` endpoint by sending an arbitrarily large request body. This… | ||||
| CVE-2026-73197US | high7.5 | — | ||
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint… | ||||
| CVE-2026-13097US | high8.7 | — | ||
A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account… | ||||
| CVE-2026-11861US | high8.1 | — | ||
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, in… | ||||
| CVE-2026-19550US | high8.2OT elevated | — | ||
A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather than a trust-administration permission, allowing an authe… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:70564 vom 2026-09-23external
- Red Hat Security Advisory RHSA-2026:72279 vom 2026-09-28external
- Red Hat Security Advisory RHSA-2026:82935 vom 2026-10-14external
- Red Hat Security Advisory RHSA-2026:83083 vom 2026-10-14external
- Red Hat Security Advisory RHSA-2026:83084 vom 2026-10-14external
- Red Hat Security Advisory RHSA-2026:83085 vom 2026-10-14external
- Red Hat Security Advisory RHSA-2026:83460 vom 2026-10-15external
- Red Hat Security Advisory RHSA-2026:83461 vom 2026-10-15external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan