CVE-2026-18147
Last modified
CVE-2026-18147 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting (XSS) vulnerability in the FreeIPA/IdM Web UI password reset page. EPSS estimates a 0.58% chance of exploitation in the next 30 days.
Description
A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting (XSS) vulnerability in the FreeIPA/IdM Web UI password reset page. By enticing a victim to click a specially crafted link and complete a password reset, the attacker could inject and execute arbitrary JavaScript code. This allows the attacker to perform actions within the victim's authenticated session, potentially leading to full administrative control if an IdM administrator is targeted.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | All versions |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | All versions |
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support | All versions |
| Red Hat | Red Hat Enterprise Linux 8 | All versions |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | All versions |
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | All versions |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | All versions |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | All versions |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | All versions |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | All versions |
| Red Hat | Red Hat Enterprise Linux 9 | All versions |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | All versions |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | All versions |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | All versions |
| Red Hat | Red Hat Enterprise Linux 6 | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-18147?
How severe is CVE-2026-18147?
How do I fix CVE-2026-18147?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-18141A flaw was found in aap-gateway, a component of Ansible Auto…8.2
- CVE-2026-18142IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.4…7.1
- CVE-2026-18143The Request a Quote for WooCommerce plugin for WordPress is …9.8
- CVE-2026-18144IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authentica…4.3
- CVE-2026-18145A stack-based buffer overflow vulnerability in the spamBlock…7.2
- CVE-2026-18146The Fluent Forms – Customizable Contact Forms, Survey, Quiz,…7.2
- CVE-2026-18148IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authentica…4.3
- CVE-2026-18149undici's retry handler can leave an already-exposed response…5.9
- CVE-2026-1815Insufficient session expiration vulnerability in Turkiye Ele…5.7
- CVE-2026-18150IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authentica…5.3
- CVE-2026-18151IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authentica…4.2
- CVE-2026-18152IBM Financial Transaction Manager (FTM) for RedHat OpenShift…7.5
Are you affected by CVE-2026-18147?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST