Threats Tagged 'cve-2026-102631'
View all threats tagged with 'cve-2026-102631'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-102631'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-102631 is an improper authentication vulnerability in Canonical's authd before version 0.7.1. The issue arises from how user identity matching is performed during login, where fallback to username matching can cause account reassignment if an identity provider reassigns an email address. This allows a new user to inherit the previous user's local UID and home directory, gaining unauthorized access to files and credentials such as SSH keys and cloud API tokens. Administrators are advised to lock or delete local authd accounts corresponding to removed identity provider accounts to mitigate this risk. Join the discussion | CVE Database V5 | 10/15/2026, 16:42:19 UTC Added: 10/15/2026, 17:04:14 UTC |
Showing 1 to 1 of 1 result