https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 18:02:57 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-366281 EUVD-2026-366281 https://cve.radiocsirt.org/vuln/euvd-2026-366281 https://cve.radiocsirt.org/vuln/fkie_cve-2026-87853 <p>A flaw was found in SSSD&#39;s IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strncmp() with the authenticated user&#39;s identifier length, performing a prefix comparison instead of an exact match. An attacker whose IdP identifier is a strict prefix of a target user&#39;s identifier can authenticate as the target user.</p> <p>A flaw was found in SSSD&#39;s IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strncmp() with the authenticated user&#39;s identifier length, performing a prefix comparison instead of an exact match. An attacker whose IdP identifier is a strict prefix of a target user&#39;s identifier can authenticate as the target user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-87853 https://cve.radiocsirt.org/vuln/ghsa-993g-jgf7-rg3x <p>A flaw was found in SSSD&#39;s IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strncmp() with the authenticated user&#39;s identifier length, performing a prefix comparison instead of an exact match. An attacker whose IdP identifier is a strict prefix of a target user&#39;s identifier can authenticate as the target user.</p> <p>A flaw was found in SSSD&#39;s IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strncmp() with the authenticated user&#39;s identifier length, performing a prefix comparison instead of an exact match. An attacker whose IdP identifier is a strict prefix of a target user&#39;s identifier can authenticate as the target user.</p> https://cve.radiocsirt.org/vuln/ghsa-993g-jgf7-rg3x https://cve.radiocsirt.org/vuln/opensuse-su-2026:11825-1 <p>libipa_hbac-devel-2.13.1-3.1 on GA media</p> <p>libipa_hbac-devel-2.13.1-3.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11825-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-87853 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: sssd, Ubuntu:Pro:18.04:LTS: sssd, Ubuntu:Pro:20.04:LTS: sssd, Ubuntu:22.04:LTS: sssd, Ubuntu:24.04:LTS: sssd, Ubuntu:26.04:LTS: sssd</p> <p>A flaw was found in SSSD&#39;s IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strncmp() with the authenticated user&#39;s identifier length, performing a prefix comparison instead of an exact match. An attacker whose IdP identifier is a strict prefix of a target user&#39;s identifier can authenticate as the target user.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: sssd, Ubuntu:Pro:18.04:LTS: sssd, Ubuntu:Pro:20.04:LTS: sssd, Ubuntu:22.04:LTS: sssd, Ubuntu:24.04:LTS: sssd, Ubuntu:26.04:LTS: sssd</p> <p>A flaw was found in SSSD&#39;s IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strncmp() with the authenticated user&#39;s identifier length, performing a prefix comparison instead of an exact match. An attacker whose IdP identifier is a strict prefix of a target user&#39;s identifier can authenticate as the target user.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-87853