The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket Granting Service (TGS) due to FreeIPA services not verifying Privilege Attribute Certificate (PAC) certificates. This vulnerability could allow an authenticated Active Directory user to escalate their privileges within the FreeIPA domain.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade softhsmUpgrade ipa-server-trust-adUpgrade ipa-server-dnsUpgrade ipa-healthcheck-coreUpgrade opendnssecUpgrade softhsm-develUpgrade ipa-selinux-nfastUpgrade ipa-client-commonUpgrade ipa-server-encrypted-dnsUpgrade python3-pyusbUpgrade python3-qrcodeUpgrade ipa-python-compatUpgrade python3-custodiaUpgrade slapi-nisUpgrade python3-qrcode-coreUpgrade python3-kdcproxyUpgrade python3-ipalibUpgrade ipa-server-commonUpgrade custodiaUpgrade ipa-commonUpgrade ipa-selinux-lunaUpgrade python3-yubicoUpgrade python3-ipaserverUpgrade ipa-client-sambaUpgrade ipa-client-encrypted-dnsUpgrade python3-ipaclientUpgrade python3-jwcryptoUpgrade python3-ipatestsUpgrade bind-dyndb-ldapUpgrade ipa-healthcheckUpgrade ipa-serverUpgrade ipa-clientUpgrade ipa-selinuxUpgrade ipa-client-epn | Oct 11, 2026 | Sep 23, 2026 |
| Amazon Linux Ami 2 | — | Upgrade python2-ipalibUpgrade ipa-serverUpgrade ipa-python-compatUpgrade python2-ipaclientUpgrade ipa-server-trust-adUpgrade ipa-debuginfoUpgrade ipa-clientUpgrade python2-ipaserverUpgrade ipa-server-dnsUpgrade ipa-client-commonUpgrade ipa-commonUpgrade ipa-server-common | Oct 19, 2026 | Oct 19, 2026 |
| Freebsd | — | Upgrade freeipa-server | Sep 18, 2026 | Sep 11, 2026 |
| Redhat_linux | — | Upgrade ipa-healthcheckUpgrade bind-dyndb-ldapUpgrade python3-ipaclientUpgrade python3-ipalibUpgrade bind-dyndb-ldap-debugsourceUpgrade softhsm-debuginfoUpgrade custodiaUpgrade python3-qrcodeUpgrade ipa-healthcheck-coreUpgrade ipa-selinuxUpgrade opendnssec-debugsourceUpgrade slapi-nis-debuginfoUpgrade python3-ipatestsUpgrade python3-jwcryptoUpgrade ipa-client-debuginfoUpgrade ipa-client-sambaUpgrade ipa-server-trust-ad-debuginfoUpgrade python3-kdcproxyUpgrade ipa-server-commonUpgrade ipa-debuginfoUpgrade ipa-server-dnsUpgrade python3-qrcode-coreUpgrade ipa-client-commonUpgrade softhsm-debugsourceUpgrade opendnssec-debuginfoUpgrade ipa-server-encrypted-dnsUpgrade ipa-server-debuginfoUpgrade ipa-server-trust-adUpgrade ipa-clientUpgrade ipa-commonUpgrade python3-pyusbUpgrade softhsmUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-client-epnUpgrade ipa-selinux-nfastUpgrade softhsm-develUpgrade opendnssecUpgrade ipa-selinux-lunaUpgrade slapi-nis-debugsourceUpgrade ipa-python-compatUpgrade ipa-serverUpgrade ipa-debugsourceUpgrade python3-ipaserverUpgrade python3-custodiaUpgrade python3-yubicoUpgrade slapi-nisNo solution existsUpgrade ipa-client-encrypted-dns | Aug 24, 2026 | Aug 20, 2026 |
| Rocky_linux | — | Upgrade ipa-client-epnUpgrade ipa-debugsourceUpgrade ipa-server-debuginfoUpgrade opendnssec-debuginfoUpgrade slapi-nis-debugsourceUpgrade softhsm-debuginfoUpgrade ipa-server-trust-ad-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-server-trust-adUpgrade slapi-nis-debuginfoUpgrade slapi-nisUpgrade ipa-client-debuginfoUpgrade ipa-debuginfoUpgrade ipa-client-sambaUpgrade softhsm-develUpgrade ipa-server-encrypted-dnsUpgrade softhsmUpgrade opendnssec-debugsourceUpgrade ipa-serverUpgrade ipa-client-encrypted-dnsUpgrade ipa-clientUpgrade opendnssecUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-dyndb-ldapUpgrade softhsm-debugsource | Sep 28, 2026 | Sep 24, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub