https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 14:42:22 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:17084 <p><strong>Affected:</strong> AlmaLinux:9: ipa-client, AlmaLinux:9: ipa-client-common, AlmaLinux:9: ipa-client-encrypted-dns, AlmaLinux:9: ipa-client-epn, AlmaLinux:9: ipa-client-samba, AlmaLinux:9: ipa-common, AlmaLinux:9: ipa-selinux, AlmaLinux:9: ipa-selinux-luna, AlmaLinux:9: ipa-selinux-nfast, AlmaLinux:9: ipa-server and 8 more</p> <p>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.</p> <p>Security Fix(es):</p> <p>* FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-7493)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: ipa-client, AlmaLinux:9: ipa-client-common, AlmaLinux:9: ipa-client-encrypted-dns, AlmaLinux:9: ipa-client-epn, AlmaLinux:9: ipa-client-samba, AlmaLinux:9: ipa-common, AlmaLinux:9: ipa-selinux, AlmaLinux:9: ipa-selinux-luna, AlmaLinux:9: ipa-selinux-nfast, AlmaLinux:9: ipa-server and 8 more</p> <p>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.</p> <p>Security Fix(es):</p> <p>* FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-7493)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:17084 https://cve.radiocsirt.org/vuln/bdu:2025-14421 bdu:2025-14421 https://cve.radiocsirt.org/vuln/bdu:2025-14421 https://cve.radiocsirt.org/vuln/essa-2025:3454 <p>Security: Modular advisory idm:DL1 - Linux Identity Management system module</p> <p>Security: Modular advisory idm:DL1 - Linux Identity Management system module</p> https://cve.radiocsirt.org/vuln/essa-2025:3454 https://cve.radiocsirt.org/vuln/euvd-2026-271924 EUVD-2026-271924 https://cve.radiocsirt.org/vuln/euvd-2026-271924 https://cve.radiocsirt.org/vuln/fkie_cve-2025-7493 <p>A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator&#39;s name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.</p> <p>A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator&#39;s name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-7493 https://cve.radiocsirt.org/vuln/ghsa-vm59-52f9-r52r <p>A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator&#39;s name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.</p> <p>A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator&#39;s name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.</p> https://cve.radiocsirt.org/vuln/ghsa-vm59-52f9-r52r https://cve.radiocsirt.org/vuln/rhsa-2025:17085 <p>FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA</p> <p>FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA</p> https://cve.radiocsirt.org/vuln/rhsa-2025:17085 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-7493 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: freeipa, Ubuntu:Pro:16.04:LTS: freeipa, Ubuntu:18.04:LTS: freeipa, Ubuntu:20.04:LTS: freeipa, Ubuntu:22.04:LTS: freeipa, Ubuntu:24.04:LTS: freeipa, Ubuntu:25.10: freeipa, Ubuntu:26.04:LTS: freeipa</p> <p>A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator&#39;s name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: freeipa, Ubuntu:Pro:16.04:LTS: freeipa, Ubuntu:18.04:LTS: freeipa, Ubuntu:20.04:LTS: freeipa, Ubuntu:22.04:LTS: freeipa, Ubuntu:24.04:LTS: freeipa, Ubuntu:25.10: freeipa, Ubuntu:26.04:LTS: freeipa</p> <p>A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator&#39;s name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-7493 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2164 <p>Ein lokaler oder entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Administratorrechte zu erlangen.</p> <p>Ein lokaler oder entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Administratorrechte zu erlangen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2164