Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket Granting Service (TGS) due to FreeIPA services not verifying Privilege Attribute Certificate (PAC) certificates. This vulnerability could allow an authenticated Active Directory user to escalate their privileges within the FreeIPA domain.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
4 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-08-20 | 2 | Disclosure1Patch1 |
| 2026-08-21 | 1 | General1 |
一次情報(NVD): https://nvd.nist.gov/vuln/detail/CVE-2026-11861 参照元(ベンダー等): https://access.redhat.com/security/cve/CVE-2026-11861, https://bugzilla.redhat.com/show_bug.cgi?id=2487472
Post summary
The post simply lists the CVE identifiers and links to NVD and vendor advisories, without any additional technical or operational details.
🚨Critical - FreeIPA Authentication Bypass via Kerberos PAC Impersonation Across AD Trust (CVE-2026-11861) In FreeIPA (Red Hat IdM) deployments with an Active Directory trust configured, an authenticated AD user can bypass authentication for FreeIPA services, the web portal, SMB server, and LDAP directory, by impersonating a client name in the Kerberos TGS. The root cause is that FreeIPA services do not verify the Privilege Attribute Certificate (PAC). The result is privilege escalation across the AD-to-FreeIPA trust boundary, effectively a compromise of the identity domain. It needs a valid AD account and a configured trust. Affects the ipa package on RHEL 7-10; Red Hat notes no acceptable mitigation, so patching is the path. CVSS 9.6. 👉Apply the FreeIPA/ipa security update per the Red Hat advisory (CVE-2026-11861).
Post summary
The advisory announces a critical FreeIPA authentication bypass vulnerability (CVE-2026-11861) and urges users to apply the Red Hat security update, providing detailed technical information and the CVSS score but no exploit code or evidence of active exploitation.
CVE-2026-11861 FreeIPA Authentication Bypass via PAC Impersonation in Trust Relationships https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-11861
Post summary
Announces CVE‑2026‑11861, a FreeIPA authentication bypass via PAC impersonation, with a link to a vulnerability detail page.
5 of 5 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | freeipa | freeipa | - | - | - |
| OS | redhat | enterprise_linux | 10.0 | - | - |
| OS | redhat | enterprise_linux | 7.0 | - | - |
| OS | redhat | enterprise_linux | 8.0 | - | - |
| OS | redhat | enterprise_linux | 9.0 | - | - |