CVE-2026-104047

A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted lookup request, manipulating the query logic to cause unauthorized information disclosure from the directory.

• CWE-140

• https://access.redhat.com/security/cve/CVE-2026-104047Vendor Advisory, Issue Tracking
• https://bugzilla.redhat.com/show_bug.cgi?id=2478616Exploit, Issue Tracking, Mitigation, Vendor Advisory

Published

Oct 6, 2026

Last Modified

Oct 9, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-104041A flaw was found in SSSD. An unprivileged local user can rep…5.5
• CVE-2026-104042A flaw was found in sssd. A local attacker can cause a Denia…5.5
• CVE-2026-104043A flaw was found in SSSD. A local attacker with access to th…5.5
• CVE-2026-104044A flaw was found in sssd. A local attacker can trigger a Den…6.2
• CVE-2026-104045A flaw was found in SSSD. A local user can trigger a Denial …4.7
• CVE-2026-104046A flaw was found in SSSD (System Security Services Daemon). …6.2
• CVE-2026-104048A flaw was found in SSSD. In trust-enabled identity manageme…8.1
• CVE-2026-104049The Academy LMS WordPress plugin before 4.0.0 does not veri…4.3
• CVE-2026-104050The Academy LMS WordPress plugin before 4.0.0 does not veri…4.3
• CVE-2026-104051PictShare before 3.7.1 contains an information disclosure vu…8.2
• CVE-2026-104052A vulnerability was determined in itsourcecode Pet Shop Mana…6.3
• CVE-2026-104053A vulnerability was identified in itsourcecode Pet Shop Mana…6.3