Linux Distros Unpatched Vulnerability : CVE-2026-104048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control HBAC rules by stripping domain qualifiers...

CVE-2026-104048

A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control HBAC rules by stripping domain qualifiers and comparing only short usernames. An authenticated user in a trusted domain who shares the same username as an authorized local account...

DEBIAN-CVE-2026-104048

A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control HBAC rules by stripping domain qualifiers and comparing only short usernames. An authenticated user in a trusted domain who shares the same username as an authorized local account...

CVE-2026-104048 Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation

A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control HBAC rules by stripping domain qualifiers and comparing only short usernames. An authenticated user in a trusted domain who shares the same username as an authorized local account...

CVE-2026-104048

A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control HBAC rules by stripping domain qualifiers and comparing only short usernames. An authenticated user in a trusted domain who shares the same username as an authorized local account...

CVE-2026-104048 Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation

A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control HBAC rules by stripping domain qualifiers and comparing only short usernames. An authenticated user in a trusted domain who shares the same username as an authorized local account...

EUVD-2026-93942

A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control HBAC rules by stripping domain qualifiers and comparing only short usernames. An authenticated user in a trusted domain who shares the same username as an authorized local account...

CVE-2026-104048

A vulnerability exists in SSSD within trust-enabled identity management environments. The system incorrectly evaluates Host-Based Access Control (HBAC) rules by stripping domain qualifiers and comparing only short usernames. This allows an authenticated user from a trusted domain to bypass access...

CVE-2026-104048 Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation

A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control HBAC rules by stripping domain qualifiers and comparing only short usernames. An authenticated user in a trusted domain who shares the same username as an authorized local account...

CVE-2026-104048

A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control HBAC rules by stripping domain qualifiers and comparing only short usernames. An authenticated user in a trusted domain who shares the same username as an authorized local account...

CVE-2026-104048

A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control HBAC rules by stripping domain qualifiers and comparing only short usernames. An authenticated user in a trusted domain who shares the same username as an authorized local account...

CVE-2026-104048: Comparison Using Wrong Factors

A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control HBAC rules by stripping domain qualifiers and comparing only short usernames. An authenticated user in a trusted domain who shares the same username as an authorized local account...

PT-2026-107174

Name of the Vulnerable Software and Affected Versions SSSD affected versions not specified Description In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control HBAC rules by stripping domain qualifiers and comparing only short usernames. This allows an...

hbac-bias-detection (>=0.1.7, <=0.2.6) potentially affected by CVE-2026-86049 via jupyter-server (1.16.0)

jupyter-server PYPI version 1.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - hbac-bias-detection =0.1.7, =0.2.6 Source cves: CVE-2026-86049 Source advisory: OSV:PYSEC-2026-4054...

hbac-bias-detection (>=0.1.7, <=0.2.6) potentially affected by CVE-2026-86049 via jupyter-server (1.16.0)

jupyter-server PYPI version 1.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - hbac-bias-detection =0.1.7, =0.2.6 Source cves: CVE-2026-86049 Source advisory: OSV:GHSA-C3MW-737P-C7G2...

hbac-bias-detection (>=0.1.7, <=0.2.6) potentially affected by CVE-2026-73415 via jupyterlab (3.3.3)

jupyterlab PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - hbac-bias-detection =0.1.7, =0.2.6 Source cves: CVE-2026-73415 Source advisory: OSV:PYSEC-2026-3671...

hbac-bias-detection (>=0.1.7, <=0.2.6) potentially affected by CVE-2026-73415 via jupyterlab (3.3.3)

jupyterlab PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - hbac-bias-detection =0.1.7, =0.2.6 Source cves: CVE-2026-73415 Source advisory: OSV:GHSA-GX64-GJ6P-PC4C...

hbac-bias-detection (>=0.1.7, <=0.2.6) potentially affected by CVE-2026-73626 via jupyterlab (3.3.3)

jupyterlab PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - hbac-bias-detection =0.1.7, =0.2.6 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G77J...

hbac-bias-detection (>=0.1.7, <=0.2.6) potentially affected by CVE-2026-5422 via jupyter-server (1.16.0)

jupyter-server PYPI version 1.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - hbac-bias-detection =0.1.7, =0.2.6 Source cves: CVE-2026-5422 Source advisory: OSV:PYSEC-2026-2532...

hbac-bias-detection (>=0.1.7, <=0.2.6) potentially affected by CVE-2026-42557 via jupyterlab (3.3.3)

jupyterlab PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - hbac-bias-detection =0.1.7, =0.2.6 Source cves: CVE-2026-42557 Source advisory: OSV:PYSEC-2026-2537...