fedoraproject has 10 CVEs on record between 2024 and 2026. Disclosure cadence is accelerating: 8 in the last 90 days against 0 in the 90 before. The busiest recent month was October 2026 with 5. The median CVSS is 5.5 (medium). None have a confirmed exploitation report. Most affected products: sssd (9), unbound (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.5
- Publish → KEV
- —
- Last 90 days
- 8 prev 0
Weakness classes
Products
- sssd 9
- unbound 1
Worst active — by depth score
CVE-2026-104048Medium· 6.8A flaw was found in SSSD49CVE-2024-1488High· 8.0A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration44CVE-2026-90462Medium· 5.4A flaw was found in SSSD42CVE-2026-104045Medium· 4.7A flaw was found in SSSD38CVE-2026-104046Medium· 6.2A flaw was found in SSSD (System Security Services Daemon)34
fedoraproject vulnerabilities
CVEs affecting fedoraproject, newest first. Open any entry for full detail, references, and exploit status.
10 CVEsRSS
CVE-2026-104046Medium· 6.2A flaw was found in SSSD (System Security Services Daemon)
A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is enabled, pre-authentication requests retain state in memory without being cleared or timed out. A local attacker can repeatedly in…
CVE-2026-104045Medium· 4.7PoCA flaw was found in SSSD
A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. By repeatedly sending concurrent map en…
CVE-2026-104048Medium· 6.8PoCA flaw was found in SSSD
A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control (HBAC) rules by stripping domain qualifiers and comparing only short usernames. An authenticated user in a trusted doma…
CVE-2026-104047Medium· 5.3A flaw was found in SSSD
A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted loo…
CVE-2026-104040Medium· 4.4A flaw was found in SSSD
A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quotes are not properly escaped before being included in Microsoft Graph Open Data Protocol (OData) queries. A low-privil…
CVE-2026-90462Medium· 5.4PoCA flaw was found in SSSD
A flaw was found in SSSD. When configured with the LDAP access provider and `ldap_access_order` including `ppolicy` or `lockout`, a fail-open condition in the LDAP ppolicy access check can occur if a user lookup returns zero results. Thi…
CVE-2026-90996Medium· 4.0A flaw was found in sssd
A flaw was found in sssd. A local unprivileged user could send a specially crafted request with a zero-length body to the Network Security Services (NSS) responder. This could lead to a denial-of-service condition, causing the NSS respon…
CVE-2026-90995Medium· 5.5A flaw was found in SSSD (System Security Services Daemon)
A flaw was found in SSSD (System Security Services Daemon). A local attacker with privileges to connect to the PAM (Pluggable Authentication Modules) responder socket can send a specially crafted protocol request. If the `pam_app_service…
CVE-2026-6245Medium· 5.5A flaw was found in the System Security Services Daemon (SSSD)
A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read_data() function within the PAM passkey responder fails to properly handle raw bytes received from a pipe. Because the data is treated as a NUL-ter…
CVE-2024-1488High· 8.0A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the…