{
  "cveId": "CVE-2026-87853",
  "url": "https://patchblox.com/security/cve/CVE-2026-87853",
  "summary": "CVE-2026-87853 is fixed in 29 products on 1 platform, first by RHSA-2026:77534, released September 9, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "sssd: A flaw was found in SSSD\u0027s IdP authentication provider",
  "description": "A flaw was found in SSSD\u0027s IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strncmp() with the authenticated user\u0027s identifier length, performing a prefix comparison instead of an exact match. An attacker whose IdP identifier is a strict prefix of a target user\u0027s identifier can authenticate as the target user.",
  "published": "2026-09-09T14:15:45Z",
  "severity": "moderate",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00328,
  "epssPercentile": 0.26062,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libipa_hbac",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libipa_hbac",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libsss_autofs",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libsss_autofs",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libsss_certmap",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libsss_certmap",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libsss_idmap",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libsss_idmap",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libsss_nss_idmap",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libsss_nss_idmap",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libsss_nss_idmap-devel",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libsss_nss_idmap-devel",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libsss_sudo",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libsss_sudo",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-libipa_hbac",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-libipa_hbac",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-libsss_nss_idmap",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-libsss_nss_idmap",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-sss",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-sss",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-sss-murmur",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-sss-murmur",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-sssdconfig",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-sssdconfig",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd",
      "release": "RHEL 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "RHSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-77534",
      "released": "2026-09-09T14:15:45Z"
    },
    {
      "platform": "linux",
      "product": "sssd",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd",
      "release": "rocky 10",
      "fixedVersion": "0:2.12.0-3.el10_2.2",
      "fix": "RLSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-77534",
      "released": "2026-11-07T00:39:51Z"
    },
    {
      "platform": "linux",
      "product": "sssd-ad",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-ad",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-client",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-client",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-common",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-common",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-common-pac",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-common-pac",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-dbus",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-dbus",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-idp",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-idp",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-ipa",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-ipa",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-kcm",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-kcm",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-krb5",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-krb5",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-krb5-common",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-krb5-common",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-ldap",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-ldap",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-nfs-idmap",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-nfs-idmap",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-passkey",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-passkey",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-proxy",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-proxy",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-tools",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-tools",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-winbind-idmap",
      "release": "almalinux 10",
      "fixedVersion": "2.12.0-3.el10_2.2",
      "fix": "ALSA-2026:77534",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-77534",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "sssd-winbind-idmap",
      "release": "ol 10",
      "fixedVersion": "0:2.12.0-3.0.1.el10_2.2",
      "fix": "ELSA-2026-77534",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-77534",
      "released": "2026-10-08T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-10T01:44:33Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}