CVE-2026-76578

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 8, 2026

Last Seen

September 14, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical FreeIPA Vulnerabilities Allow Unauthenticated Admin Access78.0

A critical flaw in FreeIPA, tracked as CVE-2026-76578, allows unauthenticated clients to create Kerberos identities and gain administrative privileges. This vulnerability arises from a misconfigured access control rule in FreeIPA's 389 Directory Server, enabling attackers to exploit it without prior...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical FreeIPA Vulnerabilities Allow Unauthenticated Admin Access

Sep 8·1 sources

Related Entities

Data Breach Fedora Microsoft Okta CVE-2026-13097 CVE-2026-79678 CVE-2026-76560 CWE-287 - Improper Authentication CWE-862 - Missing Authorization CWE-269 - Improper Privilege Management CWE-306 - Missing Authentication For Critical Function CWE-94 - Code Injection

CVE-2026-76578

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Critical FreeIPA Vulnerabilities Allow Unauthenticated Admin Access

Related Articles (3)

CVE-2026-76578

version 4.13.4

FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials

Related Entities