Threats Tagged 'cve-2026-19550'
View all threats tagged with 'cve-2026-19550'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-19550'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-19550: Incorrect Authorization in Red Hat Red Hat Enterprise Linux 10CVE-2026-19550 0 CVE-2026-19550 is a medium severity vulnerability in FreeIPA on Red Hat Enterprise Linux 10 involving incorrect authorization. The trust-fetch-domains command is protected by a read-only permission instead of a trust-administration permission, allowing an authenticated non-privileged IPA user to trigger a privileged Active Directory trust refresh with attacker-supplied credentials. This can lead to unauthorized modification of trusted-domain and ID-range identity data in the IPA LDAP directory. The flaw only affects IdM/FreeIPA servers with an active cross-forest trust to Active Directory. Exploitation requires network reachability to attacker infrastructure but no administrative privileges. No official fix or patch is currently confirmed. Administrators can mitigate risk by restricting the default "System: Read Trust Information" permission, though this may impact legitimate functionality and should be tested before deployment. Join the discussion | CVE Database V5 | 08/11/2026, 20:46:42 UTC Added: 08/11/2026, 21:11:57 UTC |
Showing 1 to 1 of 1 result