The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting (XSS) vulnerability in the FreeIPA/IdM Web UI password reset page. By enticing a victim to click a specially crafted link and complete a password reset, the attacker could inject and execute arbitrary JavaScript code. This allows the attacker to perform actions within the victim's authenticated session, potentially leading to full administrative control if an IdM administrator is targeted.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind-dyndb-ldapUpgrade ipa-client-commonUpgrade python3-ipaclientUpgrade softhsmUpgrade ipa-python-compatUpgrade python3-ipalibUpgrade python3-qrcodeUpgrade python3-jwcryptoUpgrade ipa-commonUpgrade ipa-server-encrypted-dnsUpgrade opendnssecUpgrade ipa-client-sambaUpgrade ipa-client-encrypted-dnsUpgrade custodiaUpgrade ipa-server-commonUpgrade python3-qrcode-coreUpgrade python3-ipaserverUpgrade python3-pyusbUpgrade ipa-clientUpgrade ipa-server-trust-adUpgrade ipa-healthcheckUpgrade python3-ipatestsUpgrade ipa-selinux-lunaUpgrade python3-yubicoUpgrade ipa-selinuxUpgrade softhsm-develUpgrade ipa-client-epnUpgrade ipa-selinux-nfastUpgrade python3-kdcproxyUpgrade ipa-healthcheck-coreUpgrade slapi-nisUpgrade ipa-server-dnsUpgrade ipa-serverUpgrade python3-custodia | Oct 11, 2026 | Sep 23, 2026 |
| Amazon Linux Ami 2 | — | Upgrade python2-ipalibUpgrade ipa-python-compatUpgrade ipa-debuginfoUpgrade ipa-server-dnsUpgrade ipa-server-trust-adUpgrade ipa-client-commonUpgrade ipa-server-commonUpgrade ipa-clientUpgrade python2-ipaserverUpgrade ipa-serverUpgrade ipa-commonUpgrade python2-ipaclient | Oct 19, 2026 | Oct 19, 2026 |
| Oracle_linux | — | Upgrade python3-ipatestsUpgrade python3-pyusbUpgrade python3-ipaclientUpgrade ipa-client-commonUpgrade ipa-server-commonUpgrade python3-ipalibUpgrade opendnssecUpgrade custodiaUpgrade ipa-client-sambaUpgrade python3-qrcode-coreUpgrade python3-jwcryptoUpgrade bind-dyndb-ldapUpgrade python3-qrcodeUpgrade ipa-server-encrypted-dnsUpgrade python3-ipaserverUpgrade softhsmUpgrade ipa-commonUpgrade python3-custodiaUpgrade slapi-nisUpgrade python3-yubicoUpgrade ipa-healthcheck-coreUpgrade ipa-python-compatUpgrade ipa-healthcheckUpgrade python3-kdcproxyUpgrade ipa-server-trust-adUpgrade ipa-client-encrypted-dnsUpgrade ipa-client-epnUpgrade ipa-clientUpgrade softhsm-develUpgrade ipa-selinux-nfastUpgrade ipa-selinux-lunaUpgrade ipa-selinuxUpgrade ipa-serverUpgrade ipa-server-dns | Oct 22, 2026 | Sep 9, 2026 |
| Redhat_linux | — | Upgrade ipa-client-encrypted-dnsUpgrade ipa-selinux-lunaUpgrade python3-jwcryptoUpgrade ipa-commonUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-selinuxUpgrade python3-ipaserverUpgrade python3-ipaclientUpgrade slapi-nis-debugsourceUpgrade python2-ipaserverUpgrade slapi-nisUpgrade python3-ipatestsUpgrade slapi-nis-debuginfoUpgrade ipa-client-epnUpgrade ipa-client-sambaUpgrade softhsm-debuginfoUpgrade ipa-healthcheckUpgrade python3-yubicoUpgrade ipa-serverUpgrade bind-dyndb-ldap-debugsourceUpgrade bind-dyndb-ldap-debuginfoUpgrade opendnssec-debuginfoUpgrade ipa-clientUpgrade python3-custodiaUpgrade python2-ipaclientUpgrade ipa-server-dnsUpgrade ipa-debugsourceUpgrade ipa-client-debuginfoUpgrade python3-kdcproxyUpgrade ipa-server-debuginfoUpgrade ipa-selinux-nfastUpgrade ipa-server-encrypted-dnsUpgrade ipa-client-commonUpgrade softhsmUpgrade python3-pyusbUpgrade opendnssecUpgrade softhsm-debugsourceUpgrade python3-qrcode-coreUpgrade softhsm-develUpgrade ipa-healthcheck-coreNo solution existsUpgrade python2-ipalibUpgrade python3-ipalibUpgrade ipa-server-commonUpgrade ipa-python-compatUpgrade custodiaUpgrade bind-dyndb-ldapUpgrade ipa-debuginfoUpgrade ipa-server-trust-adUpgrade opendnssec-debugsourceUpgrade python3-qrcode | Sep 11, 2026 | Sep 9, 2026 |
| Rocky_linux | — | Upgrade opendnssec-debuginfoUpgrade slapi-nisUpgrade softhsm-debuginfoUpgrade ipa-debugsourceUpgrade slapi-nis-debuginfoUpgrade ipa-server-debuginfoUpgrade slapi-nis-debugsourceUpgrade ipa-server-trust-adUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-client-epnUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-server-encrypted-dnsUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-debuginfoUpgrade ipa-client-debuginfoUpgrade ipa-serverUpgrade opendnssec-debugsourceUpgrade softhsm-debugsourceUpgrade ipa-client-sambaUpgrade ipa-client-encrypted-dnsUpgrade bind-dyndb-ldapUpgrade ipa-clientUpgrade opendnssecUpgrade softhsm-develUpgrade softhsm | Sep 28, 2026 | Sep 24, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub