CVE-2026-79678

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 7, 2026

Last Seen

September 8, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical FreeIPA Vulnerabilities Allow Unauthenticated Admin Access78.0

A critical flaw in FreeIPA, tracked as CVE-2026-76578, allows unauthenticated clients to create Kerberos identities and gain administrative privileges. This vulnerability arises from a misconfigured access control rule in FreeIPA's 389 Directory Server, enabling attackers to exploit it without prior...

Confidentiality Flaw in FreeIPA's idp-add Command Exposes Credentials57.8

A vulnerability identified as CVE-2026-79678 in FreeIPA's idp-add command allows any authenticated IPA principal to access environment variables and cause denial of service through memory exhaustion. The flaw arises from insufficient validation of input parameters, allowing unauthorized access to se...