CVE-2026-104040
mediumA flaw was found in SSSD.
Vendor / product: Fedoraproject — sssd
A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quotes are not properly escaped before being included in Microsoft Graph Open Data Protocol (OData) queries. A low-privileged local user can exploit this flaw by submitting a crafted search request, altering query filters to broaden user or group searches. This can lead to information disclosure by retrieving unintended directory objects, as well as a Denial of Service (DoS) through excessive processing and cache population.
CVSS
6.1
6.1 (CVSS v3.1)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H Severity source: NVD CVSS v3.1 (nvd@nist.gov)
Timeline (UTC)
Published: 2026-10-06 02:17
Modified: 2026-10-16 21:19
NVD status: Analyzed
Last synced 3 days ago
Verified against the source API 2026-10-27 06:57 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
fedoraproject / sssd 2.12.0
redhat / openshift_container_platform 4.0
redhat / enterprise_linux 7.0, 8.0, 9.0, 10.0
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
Vendor advisory: https://access.redhat.com/security/cve/CVE-2026-104040
Vendor advisory: https://bugzilla.redhat.com/show_bug.cgi?id=2478915
Patch / mitigation: https://bugzilla.redhat.com/show_bug.cgi?id=2478915
References
- https://access.redhat.com/security/cve/CVE-2026-104040 secalert@redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=2478915 secalert@redhat.com
Data sources
NVD CVE API 2.0 — fetched 2026-10-27 06:57 UTC · record ↗