Red Hat Security Advisory

RHSA-2026:93071

ipa security update

Released 2026-10-30 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) ipa-4.6.8-5.el7_9.25, ipa-client-4.6.8-5.el7_9.25, ipa-client-common-4.6.8-5.el7_9.25 +9

Fixes 6 records

TI-2026-53517 CVE-2026-76578 · GHSA-cgrx-2q4j-9f37

Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci

MEDIUM 51

A flaw was found in FreeIPA.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01312 Published 2026-09-07 Partial fix · 4.13.4-1.el10_2, 4.12.2-15.el10_0.7 +13 CWE-306

TI-2026-10236 CVE-2026-11861 · GHSA-g67c-jg9c-rqh2

Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships

MEDIUM 43

A flaw was found in FreeIPA.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00363 Published 2026-08-20 Partial fix · 4.13.4-1.el10_2, 4.12.2-15.el10_0.7 +13 CWE-266

TI-2026-11136 CVE-2026-13097 · GHSA-q4ph-46qc-4w6x

Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware…

MEDIUM 41

A privilege escalation flaw was found in FreeIPA.

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.00775 Published 2026-08-20 Partial fix · 4.13.4-1.el10_2, 4.12.2-15.el10_0.7 +13 CWE-706

TI-2026-51342 CVE-2026-73197 · GHSA-m6vw-rcwj-pg9q