Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty stored attribute value, allowing an unauthenticated client to satisfy access control checks intended to require a matching authenticated identity. This can allow an anonymous LDAP client to perform an operation, such as adding or modifying a directory entry, that a SELFDN-based ACI intended to restrict to a specific authenticated user.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-09-08 | 3 | General1Patch2 |
| 2026-09-09 | 1 | Patch1 |
Red Hat tracks the FreeIPA issue as CVE-2026-76578, rated 9.8, and the 389 Directory Server flaw as CVE-2026-76560, rated 7.5. Red Hat says it reproduced the chain twice on a default installation. https://t.co/vCqDUFuBcs
Post summary
Red Hat reports and rates the FreeIPA (CVE-2026-76578) and 389 Directory Server (CVE-2026-76560) vulnerabilities, noting that the exploit chain was reproduced twice on a default installation.
Big security alert: Anonymous clients can now craft their way into admin accounts via FreeIPA & 389-ds flaws. If you run FreeIPA, version 4.13.4 has the fixes. Keywords: FreeIPA, 389-ds, CVE-2026-76578, CVE-2026-76560, identity management, privilege escalation. #SecurityNews #FreeIPA #389ds #PrivilegeEscalation #CVE2026 #Linux https://thedailytechfeed.com/critical-freeipa-chain-flaw-lets-anonymous-users-become-admins/
Post summary
The alert reports that anonymous users can exploit two CVEs (CVE‑2026‑76578 and CVE‑2026‑76560) to gain admin access on FreeIPA and 389‑ds, and indicates that FreeIPA version 4.13.4 includes the appropriate fixes.
🚨 HIGH SEVERITY: CVE-2026-76560 (CVSS 7.5) 389 Directory Server flaw allows anonymous LDAP clients to bypass SELFDN ACI authentication checks, enabling unauthorized directory modifications. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/fyExA4Rgde
Post summary
The tweet alerts that CVE-2026-76560 allows anonymous LDAP clients to modify directories; an immediate patch is required.
Red Hat FreeIPA/IdM flaw chain lets an anonymous client mint a chosen Kerberos identity and join the administrators group. CVE-2026-76578 scores CVSS 9.8 critical (preliminary) and needs a paired 389 Directory Server access-control bug (CVE-2026-76560). Fixed in FreeIPA 4.13.4; Red Hat reproduced it on a default install with no prior login.
Post summary
The text reports a critical flaw (CVE-2026-76578) in Red Hat FreeIPA/IdM allowing anonymous clients to create Kerberos identities and add themselves to the administrators group, and states that Red Hat has fixed the issue in FreeIPA 4.13.4.