Every CVE Search/ Get API key

CVE-2026-87853

Sssd: sssd: idp authentication prefix comparison allows cross-user impersonation

7.5 HighFix available

A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strncmp() with the authenticated user's identifier length, performing a prefix comparison instead of an exact match. An attacker whose IdP identifier is a strict prefix of a target user's identifier can authenticate as the target user.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.33%Unchanged since Sep 10, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.5

Sssd: sssd: idp authentication prefix comparison allows cross-user impersonation

A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strncmp() with the authenticated user's identifier length, performing a prefix comparison instead of an exact match. An attacker whose IdP identifier is a strict prefix of a target user's identifier can authenticate as the target user.

Record
CVE-2026-87853
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-187
Updated
2026-11-06
EUVDEUVD-2026-75084 7.5

A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strncmp() with the authenticated user's identifier length, performing a prefix comparison instead of an exact match. An attacker whose IdP identifier is a strict prefix of a target user's identifier can authenticate as the target user.

Record
EUVD-2026-75084
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
GitHub AdvisoriesGHSA-993g-jgf7-rg3x 7.5

A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function...

A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strncmp() with the authenticated user's identifier length, performing a prefix comparison instead of an exact match. An attacker whose IdP identifier is a strict prefix of a target user's identifier can authenticate as the target user.

Record
GHSA-993g-jgf7-rg3x
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-187
Updated
2026-11-02
NVD 7.5

A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strncmp() with the authenticated user's identifier length, performing a prefix comparison instead of an exact match. An attacker whose IdP identifier is a strict prefix of a target user's identifier can authenticate as the target user.

Record
CVE-2026-87853
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-187
Updated
2026-11-06
OSVDEBIAN-CVE-2026-87853 7.5

A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strncmp() with the authenticated user's identifier length, performing a prefix comparison instead of an exact match. An attacker whose IdP identifier is a strict prefix of a target user's identifier can authenticate as the target user.

Record
DEBIAN-CVE-2026-87853
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-07
OSVRHSA-2026:77534 7.5

Red Hat Security Advisory: sssd security update

Record
RHSA-2026:77534
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 4 moreShow less
OSVRLSA-2026:77534 7.5

Moderate: sssd security update

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

  • sssd: sssd: IdP authentication prefix comparison allows cross-user impersonation (CVE-2026-87853)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:77534
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-87853 7.5

A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strncmp() with the authenticated user's identifier length, performing a prefix comparison instead of an exact match. An attacker whose IdP identifier is a strict prefix of a target user's identifier can authenticate as the target user.

Record
UBUNTU-CVE-2026-87853
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:77534 No score

Moderate: sssd security update

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

  • sssd: sssd: IdP authentication prefix comparison allows cross-user impersonation (CVE-2026-87853)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:77534
Updated
2026-11-02
OSVopenSUSE-SU-2026:11825-1 No score

libipa_hbac-devel-2.13.1-3.1 on GA media

These are all security issues fixed in the libipa_hbac-devel-2.13.1-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11825-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libipa_hbac
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
libsss_autofs
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
libsss_certmap
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
libsss_idmap
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
libsss_nss_idmap
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
libsss_nss_idmap-devel
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
libsss_sudo
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
python3-libipa_hbac
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
python3-libsss_nss_idmap
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
python3-sss
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
Show 88 moreShow less
Affected packages
PackageAffectedFixed
python3-sss-murmur
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
python3-sssdconfig
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
sssd
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
sssd-ad
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
sssd-client
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
sssd-common
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
sssd-common-pac
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
sssd-dbus
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
sssd-idp
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
sssd-ipa
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
sssd-kcm
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
sssd-krb5
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
sssd-krb5-common
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
sssd-ldap
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
sssd-nfs-idmap
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
sssd-passkey
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
sssd-proxy
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
sssd-tools
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
sssd-winbind-idmap
AlmaLinux:10
 before 2.12.0-3.el10_2.2
2.12.0-3.el10_2.2
sssd
Debian:12
 All versions, plus listed versions
2.10.1-12.10.1-22.11.1-12.11.1-22.11.1-2.1
Show 22 moreShow less
2.12.0-12.12.0-22.12.0-3~exp02.12.0-42.13.1-12.13.1-22.13.1-32.13.1-42.8.2-42.8.2-4+deb12u12.9.1-12.9.1-22.9.2-12.9.4-12.9.4-1.12.9.4-1.1~exp12.9.4-22.9.5-12.9.5-22.9.5-32.9.5-42.9.5-5
 None known
sssd
Debian:13
 All versions, plus listed versions
2.10.1-22.11.1-12.11.1-22.11.1-2.12.12.0-1
Show 7 moreShow less
2.12.0-22.12.0-3~exp02.12.0-42.13.1-12.13.1-22.13.1-32.13.1-4
 None known
sssd
Debian:14
 All versions, plus listed versions
2.10.1-22.11.1-12.11.1-22.11.1-2.12.12.0-1
Show 7 moreShow less
2.12.0-22.12.0-3~exp02.12.0-42.13.1-12.13.1-22.13.1-32.13.1-4
 None known
libipa_hbac-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
libsss_autofs-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
libsss_certmap-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
libsss_idmap-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
libsss_nss_idmap-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
libsss_sudo-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
python3-libipa_hbac-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
python3-libsss_nss_idmap-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
python3-sss-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
python3-sss-murmur-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-ad-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-client-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-common-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-common-pac-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-dbus-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-debugsource
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-idp
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-idp-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-ipa-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-kcm-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-krb5-common-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-krb5-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-ldap-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-nfs-idmap-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-passkey-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-proxy-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-tools-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-winbind-idmap-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
libipa_hbac
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
libsss_autofs
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
libsss_certmap
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
libsss_idmap
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
libsss_nss_idmap
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
libsss_sudo
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
python3-libipa_hbac
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
python3-libsss_nss_idmap
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
python3-sss
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
python3-sss-murmur
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
python3-sssdconfig
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-ad
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-client
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-common
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-common-pac
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-dbus
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-ipa
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-kcm
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-krb5
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-krb5-common
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-ldap
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-nfs-idmap
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-passkey
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-proxy
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-tools
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd-winbind-idmap
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
libsss_nss_idmap-devel
Red Hat:enterprise_linux:10.2
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd
Rocky Linux:10
 before 0:2.12.0-3.el10_2.2
0:2.12.0-3.el10_2.2
sssd
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.12.5-21.13.1-21.13.2-11.13.3-11.13.4-1
Show 15 moreShow less
1.13.4-1ubuntu11.13.4-1ubuntu1.11.13.4-1ubuntu1.21.13.4-1ubuntu1.51.13.4-1ubuntu1.61.13.4-1ubuntu1.71.13.4-1ubuntu1.81.13.4-1ubuntu1.91.13.4-1ubuntu1.101.13.4-1ubuntu1.111.13.4-1ubuntu1.121.13.4-1ubuntu1.131.13.4-1ubuntu1.141.13.4-1ubuntu1.151.13.4-1ubuntu1.15+esm1
 None known
sssd
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.15.3-2ubuntu11.15.3-3ubuntu11.16.0-5ubuntu11.16.0-5ubuntu21.16.1-1ubuntu1
Show 9 moreShow less
1.16.1-1ubuntu1.11.16.1-1ubuntu1.21.16.1-1ubuntu1.31.16.1-1ubuntu1.41.16.1-1ubuntu1.51.16.1-1ubuntu1.61.16.1-1ubuntu1.71.16.1-1ubuntu1.81.16.1-1ubuntu1.8+esm1
 None known
sssd
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
2.2.0-4ubuntu12.2.2-12.2.2-1ubuntu12.2.3-1.1ubuntu12.2.3-2
Show 14 moreShow less
2.2.3-32.2.3-3ubuntu0.12.2.3-3ubuntu0.22.2.3-3ubuntu0.32.2.3-3ubuntu0.42.2.3-3ubuntu0.62.2.3-3ubuntu0.72.2.3-3ubuntu0.82.2.3-3ubuntu0.92.2.3-3ubuntu0.102.2.3-3ubuntu0.112.2.3-3ubuntu0.122.2.3-3ubuntu0.132.2.3-3ubuntu0.13+esm1
 None known
sssd
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.4.1-2ubuntu42.5.2-4ubuntu12.5.2-4ubuntu32.5.2-4ubuntu42.6.1-1ubuntu3
Show 9 moreShow less
2.6.3-1ubuntu32.6.3-1ubuntu3.12.6.3-1ubuntu3.22.6.3-1ubuntu3.32.6.3-1ubuntu3.42.6.3-1ubuntu3.52.6.3-1ubuntu3.62.6.3-1ubuntu3.82.6.3-1ubuntu3.9
 None known
sssd
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.9.1-2ubuntu22.9.1-2ubuntu32.9.2-1ubuntu22.9.4-1ubuntu12.9.4-1.1ubuntu3
Show 10 moreShow less
2.9.4-1.1ubuntu52.9.4-1.1ubuntu62.9.4-1.1ubuntu6.12.9.4-1.1ubuntu6.22.9.4-1.1ubuntu6.32.9.4-1.1ubuntu6.42.9.4-1.1ubuntu6.52.9.4-1.1ubuntu6.62.9.4-1.1ubuntu6.72.9.4-1.1ubuntu6.8
 None known
sssd
Ubuntu:26.10
 All versions, plus listed versions
2.12.0-1ubuntu52.12.0-4ubuntu12.12.0-4ubuntu22.12.0-4ubuntu32.12.0-4ubuntu4
 None known
sssd
Ubuntu:26.04:LTS
 All versions, plus listed versions
2.10.1-2ubuntu52.10.1-2ubuntu72.12.0-1ubuntu32.12.0-1ubuntu42.12.0-1ubuntu5
Show 5 moreShow less
2.12.0-1ubuntu5.12.12.0-1ubuntu5.22.12.0-1ubuntu5.32.12.0-1ubuntu5.42.12.0-1ubuntu5.5
 None known
sssd
openSUSE:Tumbleweed
 before 2.13.1-3.1
2.13.1-3.1

History

History
RecordedChangedSources
affectedOSV
affectedCVE List, NVD, OSV
factsEUVD, NVD, OSV
productsCVE List
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-87853 is a high vulnerability (CVSS 7.5) in Red Hat Enterprise Linux 10, published September 9, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 26th percentile. Fixed in libipa_hbac 2.12.0-3.el10_2.2.

References

Show 8 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open