Vulnerabilities

TI-2026-26683 CVE-2026-34397

himmelblau: NSS fake-primary group lookup reintroduces name collision risk

HIGH 66

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00164 Published 2026-04-01 Fixed in 2.3.9, 3.1.1 CWE-269

TI-2026-24522 CVE-2026-31979

HIGH 73

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00232 Published 2026-03-11 Fixed in 2.3.8, 3.1.0 CWE-59

TI-2026-24501 CVE-2026-31957

MEDIUM 50

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0057 Published 2026-03-11 Fixed in 3.1.0 CWE-1188

TI-2025-34616 CVE-2025-54882

HIGH 66

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00252 Published 2025-08-07 Fixed in 0.9.22, 1.2.0 CWE-522