12422 matches found
CVE-2026-110838 FreeRDP shadow before 3.32.0 Pre-Authentication Input Injection via Confirm Active bypass
FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to inject keyboard input. Attackers can negotiate TLS-only RDP and send an input PDU without Confirm Active to inject synthetic keystrokes...
FreeIPA: idm: ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket...
FreeIPA: idm: ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket...
freeipa: ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes
A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather than a trust-administration permission, allowing an authenticated, non-privileged IPA user to trigger a privileged Active Directory trust refresh using an attacker-supplied...
FreeIPA: idm: ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket...
CVE-2026-54554 FOG adInfo endpoint is reported to disclose the Active Directory join password
FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.1870, the management adInfo endpoint in packages/web/lib/fog/fogpage.class.php was reported to return the FOGADDEFAULTPASSWORD value in its domainpass JSON field and to be dispatchable through...
EUVD-2026-101377
An Improper Release of Memory Before Removing Last Reference vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved on QFX5K-family platforms allows a configured EVPN peer to cause a denial of service through memory exhaustion via EVPN-VXLAN active-active multihoming...
FreeIPA: idm: ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket...
Exploit for Improper Authorization in Microsoft
certighost – NXC module for CVE-2026-54121 NetExec NXC...
CLEANSTART-2026-LS90448 In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: remove kernfs active break A warning was found: WARNING: CPU: 10 PID: 3486953 at fs/kernfs/file
Security vulnerability affects the openjdk11 package. In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: remove kernfs active break A warning was found: WARNING: CPU: 10 PID: 3486953 at fs/kernfs/file...
Active Directory Domain Services Code Execution
The vulnerability of Active Directory Domain Services for Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Active Directory Certificate Services CA Chase Configuration Checker
The Certighost NetExec SMB module checks Active Directory Certificate Services configuration for the EDITFATTRIBUTESUBJECTALTNAME2 chase flag associated with CVE-2026-54121...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: openssh (UTSA-2026-130150)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130150 advisory. sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory...
Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for October 2026, which includes 1415 vulnerabilities affecting a range of products, including 85 that Microsoft marked as "critical." Microsoft notes that 1 of the vulnerabilities disclosed this month have been exploited in the wild CVE-2026-969...
CVE-2026-107370 Improper Request Handling for Active Directory Logins in auth0-lock
When a username for an Active Directory connection is a domain without a local part, the auth0-lock library initiates the authentication transaction with a GET request instead of a POST request. As a result, user-submitted form data is appended to the URL as query string parameters...
CVE-2026-107370
The auth0-lock library is vulnerable to improper request handling during Active Directory logins. When a username consists of a domain without a local part, the library incorrectly initiates the authentication transaction using a GET request instead of a POST request. This causes sensitive user-s...
CVE-2026-97788
Observable discrepancy in Active Directory Federation Services AD FS allows an unauthorized attacker to disclose information over a network...
CVE-2026-96252
Improper verification of cryptographic signature in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...