CVE-2026-88252

A flaw was found in sssd. A local user can cause a Denial of Service (DoS) by exhausting the responder service's available file descriptors (system handles used for open connections). By opening and maintaining many concurrent connections to a responder socket while continuing to queue new connection attempts, an attacker can trigger an unthrottled retry loop. This condition leads to high CPU utilization and stalls the service, preventing legitimate identity and authentication requests from being processed.

• CWE-835

• https://access.redhat.com/security/cve/CVE-2026-88252Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2479240Exploit, Issue Tracking, Mitigation, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2479240Exploit, Issue Tracking, Mitigation, Vendor Advisory

Published

Oct 6, 2026

Last Modified

Oct 20, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-88219Untrusted pointer dereference in RPC Runtime allows an unaut…8.8
• CVE-2026-8822A memory corruption vulnerability exists in the vtkDEMReader…7.5
• CVE-2026-88226Out-of-bounds read in Windows Storage Port Driver allows an …4.6
• CVE-2026-8823Mattermost versions 11.7.x <= 11.7.0, 10.11.x <= 10.11.17 fa…3.8
• CVE-2026-8824A memory corruption vulnerability exists in the vtkBMPReader…7.5
• CVE-2026-8825The Elementor Website Builder WordPress plugin before 4.1.4…4.9
• CVE-2026-88255Improper Validation of Unsafe Equivalence in Input in ZenHiv…6.3
• CVE-2026-88257Improper Input Validation vulnerability in BeamMCP.Schema in…5.3
• CVE-2026-88259CareCam CM2507 IP cameras do not require authentication for …7.5
• CVE-2026-88260Authentication bypass using an alternate path or channel and…8.7
• CVE-2026-88261Improper input validation vulnerability in bizwell xClick al…5.1
• CVE-2026-88262Insufficient session expiration vulnerability in bizwell xCl…8.7