https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-10T22:03:13.526683+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-104048 fkie_cve-2026-104048 2026-10-10T22:03:13.554384+00:00

A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control (HBAC) rules by stripping domain qualifiers and comparing only short usernames. An authenticated user in a trusted domain who shares the same username as an authorized local account can bypass access policies and gain unauthorized access to protected services or hosts.

 https://db.gcve.eu/vuln/ghsa-474r-m56w-5qgh GHSA-474r-m56w-5qgh 2026-10-10T22:03:13.554470+00:00

A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control (HBAC) rules by stripping domain qualifiers and comparing only short usernames. An authenticated user in a trusted domain who shares the same username as an authorized local account can bypass access policies and gain unauthorized access to protected services or hosts.

 https://db.gcve.eu/vuln/ubuntu-cve-2026-104048 UBUNTU-CVE-2026-104048 2026-10-10T22:03:13.554502+00:00

Affected: Ubuntu:Pro:16.04:LTS: sssd, Ubuntu:Pro:18.04:LTS: sssd, Ubuntu:Pro:20.04:LTS: sssd, Ubuntu:22.04:LTS: sssd, Ubuntu:24.04:LTS: sssd, Ubuntu:26.04:LTS: sssd

(A flaw was found in SSSD. In trust-enabled identity management environ ...)