https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T18:42:00.722775+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:9184 ALSA-2025:9184 — Important: ipa security update 2026-10-05T18:42:01.088093+00:00

Affected: AlmaLinux:9: ipa-client, AlmaLinux:9: ipa-client-common, AlmaLinux:9: ipa-client-encrypted-dns, AlmaLinux:9: ipa-client-epn, AlmaLinux:9: ipa-client-samba, AlmaLinux:9: ipa-common, AlmaLinux:9: ipa-selinux, AlmaLinux:9: ipa-selinux-luna, AlmaLinux:9: ipa-selinux-nfast, AlmaLinux:9: ipa-server and 8 more

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

* freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-04863 bdu:2025-04863 2026-10-05T18:42:01.088224+00:00 bdu:2025-04863 https://cve.radiocsirt.org/vuln/essa-2025:3024 ESSA-2025:3024 — Security: Modular advisory idm:DL1 - Identity Management system module 2026-10-05T18:42:01.088257+00:00

Security: Modular advisory idm:DL1 - Identity Management system module

 https://cve.radiocsirt.org/vuln/euvd-2026-331314 EUVD-2026-331314 2026-10-05T18:42:01.088293+00:00 EUVD-2026-331314 https://cve.radiocsirt.org/vuln/fkie_cve-2025-4404 fkie_cve-2025-4404 2026-10-05T18:42:01.088322+00:00

A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA package fails to validate the uniqueness of the `krbCanonicalName` for the admin account by default, allowing users to create services with the same canonical name as the REALM admin. When a successful attack happens, the user can retrieve a Kerberos ticket in the name of this service, containing the admin@REALM credential. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.

 https://cve.radiocsirt.org/vuln/ghsa-w66p-wgwc-mqmw GHSA-w66p-wgwc-mqmw 2026-10-05T18:42:01.088366+00:00

A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA package fails to validate the uniqueness of the `krbCanonicalName` for the admin account by default, allowing users to create services with the same canonical name as the REALM admin. When a successful attack happens, the user can retrieve a Kerberos ticket in the name of this service, containing the admin@REALM credential. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.

 https://cve.radiocsirt.org/vuln/rhsa-2025:9185 RHSA-2025:9185 — Red Hat Security Advisory: ipa security update 2026-10-05T18:42:01.088396+00:00

freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-4404 UBUNTU-CVE-2025-4404 2026-10-05T18:42:01.088428+00:00

Affected: Ubuntu:Pro:14.04:LTS: freeipa, Ubuntu:Pro:16.04:LTS: freeipa, Ubuntu:18.04:LTS: freeipa, Ubuntu:20.04:LTS: freeipa, Ubuntu:22.04:LTS: freeipa, Ubuntu:24.04:LTS: freeipa, Ubuntu:25.10: freeipa, Ubuntu:26.04:LTS: freeipa

A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA package fails to validate the uniqueness of the `krbCanonicalName` for the admin account by default, allowing users to create services with the same canonical name as the REALM admin. When a successful attack happens, the user can retrieve a Kerberos ticket in the name of this service, containing the admin@REALM credential. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1338 WID-SEC-W-2025-1338 — Red Hat Enterprise Linux (freeIPA): Schwachstelle ermöglicht Privilegieneskalation 2026-10-05T18:42:01.088481+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle im freeIPA Paket von Red Hat Enterprise Linux ausnutzen, um seine Privilegien zu erhöhen.