Known Vulnerabilities for Sssd by Fedorahosted
Listed below are 2 of the newest known vulnerabilities associated with "Sssd" by "Fedorahosted".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-104048 json | A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control (HBAC) ... | Not Provided | 2026-10-06 | 2026-10-07 |
| CVE-2026-104047 json | A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being in... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-104046 json | A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is enabled, pre-authe... | Not Provided | 2026-10-06 | 2026-10-09 |
| CVE-2026-104045 json | A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autofs res... | Not Provided | 2026-10-06 | 2026-10-07 |
| CVE-2026-104044 json | A flaw was found in sssd. A local attacker can trigger a Denial of Service (DoS) by sending a specially crafted Pluggable Aut... | Not Provided | 2026-10-06 | 2026-10-08 |
| CVE-2026-104043 json | A flaw was found in SSSD. A local attacker with access to the Name Service Switch (NSS) responder UNIX socket can trigger an ... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-104042 json | A flaw was found in sssd. A local attacker can cause a Denial of Service (DoS) by sending a crafted Pluggable Authentication ... | Not Provided | 2026-10-06 | 2026-10-07 |
| CVE-2026-104041 json | A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the Name ... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-104040 json | A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quotes ar... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-104039 json | A flaw was found in SSSD. A local user can cause a denial of service (DoS) by disrupting system authentication services. When... | Not Provided | 2026-10-06 | 2026-10-08 |