Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strncmp() with the authenticated user's identifier length, performing a prefix comparison instead of an exact match. An attacker whose IdP identifier is a strict prefix of a target user's identifier can authenticate as the target user.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
The severity is increased for this new vulnerability affecting Red Hat Enterprise Linux and OpenShift Container Platform (CVE-2026-87853) https://vuldb.com/vuln/401834
Post summary
New vulnerability CVE‑2026‑87853 affecting Red Hat Enterprise Linux and OpenShift Container Platform has increased severity, but no PoC, exploit, or patch details were given.