CVE-2026-13097

A privilege escalation flaw in FreeIPA 's 389-ds directory server allows a user with sufficient LDAP write privileges to create a service principal that impersonates an existing privileged one. The root cause is that the uniqueness constraint on Kerberos principal name attributes (specifically kr...

EUVD-2026-63243

A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to...

CVE-2026-13097

A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to...

GHSA-WMXR-6J5F-838P vulnerabilities

Vulnerabilities for packages: keycloak...

EUVD-2026-62940

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could expose sensitive credentials by invoking an action that causes the full connector process environment to be written to a persistent debug log file in plaintext. For more...

EUVD-2026-62939

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could cause sensitive Active Directory response data to be written to a persistent debug log file by triggering write operations through the app. For more information see Run an acti...

EUVD-2026-62938

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could inject crafted input into an Active Directory query to enumerate Active Directory objects, including accounts, groups, and organizational units, read sensitive attributes from...

PT-2026-78920

A flaw was found in the ipa-enrollment SLAPI plugin. A remote authenticated client can exploit a null pointer dereference vulnerability by sending a malformed Lightweight Directory Access Protocol LDAP extended operation. By omitting the request value for the JOIN OID in the ipa-enrollment extend...

PT-2026-78916

Name of the Vulnerable Software and Affected Versions FreeIPA affected versions not specified Description A privilege escalation flaw exists in FreeIPA due to a failure in the 389-ds directory server to properly enforce uniqueness constraints on Kerberos principal name attributes. The server does...

Linux Distros Unpatched Vulnerability : CVE-2026-73199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the ipa-enrollment SLAPI plugin. A remote authenticated client can exploit a null pointer dereference vulnerability by sending a malformed...

Linux Distros Unpatched Vulnerability : CVE-2026-13097

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does n...

cve-2026-59270 - CRITICAL - Spring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfaces

cve-2026-59270 - CRITICAL - Spring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfaces...

CVE-2026-76373

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could inject crafted input into an Active Directory query to enumerate Active Directory objects, including accounts, groups, and organizational units, read sensitive attributes from...

CVE-2026-76375

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could expose sensitive credentials by invoking an action that causes the full connector process environment to be written to a persistent debug log file in plaintext. For more...

CVE-2026-76374

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could cause sensitive Active Directory response data to be written to a persistent debug log file by triggering write operations through the app. For more information see Run an acti...

CVE-2026-76375 Information Disclosure through Environment Data Logging in AD LDAP app for Splunk SOAR

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could expose sensitive credentials by invoking an action that causes the full connector process environment to be written to a persistent debug log file in plaintext. For more...

CVE-2026-76375

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR , a user with permission to run actions can trigger an action that causes the full connector process environment to be written to a persistent debug log file in plaintext , exposing sensitive credentials. This is an information disclosure...

CVE-2026-76374

In AD LDAP app for Splunk SOAR versions below 2.3.8, a low-privileged user with action-run permissions can trigger write operations that persist sensitive Active Directory response data to a debug log file, causing information disclosure. CVSS 3.1 scores it MEDIUM (4.3). Update to version 2.3.8. ...

CVE-2026-76374 Information Disclosure through Sensitive Data Logging in AD LDAP app for Splunk SOAR

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could cause sensitive Active Directory response data to be written to a persistent debug log file by triggering write operations through the app. For more information see Run an acti...

CVE-2026-76373

In AD LDAP app for Splunk SOAR versions below 2.3.8, a low-privilege user can inject crafted input into Active Directory queries via action parameters, enabling enumeration of accounts/groups/OUs, reading sensitive attributes from arbitrary objects, and redirecting account-modification actions. C...