CVE-2026-19550 Common Vulnerabilities and Exposures

Upstream information

CVE-2026-19550 at MITRE

Description

A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather than a trust-administration permission, allowing an authenticated, non-privileged IPA user to trigger a privileged Active Directory trust refresh using an attacker-supplied server and credentials, resulting in unauthorized, attacker-controlled modification of trusted-domain and ID-range identity data in the IPA LDAP directory.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having important severity.

CVSS v3 Scores
CVSS detail	CNA (Red Hat)
Base Score	8.2
Vector	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
Attack Vector	Network
Attack Complexity	High
Privileges Required	Low
User Interaction	None
Scope	Changed
Confidentiality Impact	High
Integrity Impact	High
Availability Impact	None
CVSSv3 Version	3.1

SUSE Bugzilla entry: 1275268 [NEW]

SUSE Security Advisories:

RHSA-2026:70564, published Mon Sep 28 15:07:47 UTC 2026
RHSA-2026:72279, published Tue Sep 29 15:07:42 UTC 2026

List of released packages

Product(s)	Fixed package version(s)	References
SUSE Liberty Linux 10	`ipa-client >= 4.13.4-1.el10_2` `ipa-client-common >= 4.13.4-1.el10_2` `ipa-client-encrypted-dns >= 4.13.4-1.el10_2` `ipa-client-epn >= 4.13.4-1.el10_2` `ipa-client-samba >= 4.13.4-1.el10_2` `ipa-common >= 4.13.4-1.el10_2` `ipa-selinux >= 4.13.4-1.el10_2` `ipa-selinux-luna >= 4.13.4-1.el10_2` `ipa-selinux-nfast >= 4.13.4-1.el10_2` `ipa-server >= 4.13.4-1.el10_2` `ipa-server-common >= 4.13.4-1.el10_2` `ipa-server-dns >= 4.13.4-1.el10_2` `ipa-server-encrypted-dns >= 4.13.4-1.el10_2` `ipa-server-trust-ad >= 4.13.4-1.el10_2` `python3-ipaclient >= 4.13.4-1.el10_2` `python3-ipalib >= 4.13.4-1.el10_2` `python3-ipaserver >= 4.13.4-1.el10_2` `python3-ipatests >= 4.13.4-1.el10_2`	Patchnames: RHSA-2026:72279 (x86_64)
SUSE Liberty Linux 9.6 EMS	`ipa-client >= 4.12.2-14.el9_6.8` `ipa-client-common >= 4.12.2-14.el9_6.8` `ipa-client-encrypted-dns >= 4.12.2-14.el9_6.8` `ipa-client-epn >= 4.12.2-14.el9_6.8` `ipa-client-samba >= 4.12.2-14.el9_6.8` `ipa-common >= 4.12.2-14.el9_6.8` `ipa-selinux >= 4.12.2-14.el9_6.8` `ipa-selinux-luna >= 4.12.2-14.el9_6.8` `ipa-selinux-nfast >= 4.12.2-14.el9_6.8` `ipa-server >= 4.12.2-14.el9_6.8` `ipa-server-common >= 4.12.2-14.el9_6.8` `ipa-server-dns >= 4.12.2-14.el9_6.8` `ipa-server-encrypted-dns >= 4.12.2-14.el9_6.8` `ipa-server-trust-ad >= 4.12.2-14.el9_6.8` `python3-ipaclient >= 4.12.2-14.el9_6.8` `python3-ipalib >= 4.12.2-14.el9_6.8` `python3-ipaserver >= 4.12.2-14.el9_6.8` `python3-ipatests >= 4.12.2-14.el9_6.8`	Patchnames: RHSA-2026:83083 (x86_64)
SUSE Liberty Linux 9	`ipa-client >= 4.13.4-1.el9_8` `ipa-client-common >= 4.13.4-1.el9_8` `ipa-client-encrypted-dns >= 4.13.4-1.el9_8` `ipa-client-epn >= 4.13.4-1.el9_8` `ipa-client-samba >= 4.13.4-1.el9_8` `ipa-common >= 4.13.4-1.el9_8` `ipa-selinux >= 4.13.4-1.el9_8` `ipa-selinux-luna >= 4.13.4-1.el9_8` `ipa-selinux-nfast >= 4.13.4-1.el9_8` `ipa-server >= 4.13.4-1.el9_8` `ipa-server-common >= 4.13.4-1.el9_8` `ipa-server-dns >= 4.13.4-1.el9_8` `ipa-server-encrypted-dns >= 4.13.4-1.el9_8` `ipa-server-trust-ad >= 4.13.4-1.el9_8` `python3-ipaclient >= 4.13.4-1.el9_8` `python3-ipalib >= 4.13.4-1.el9_8` `python3-ipaserver >= 4.13.4-1.el9_8` `python3-ipatests >= 4.13.4-1.el9_8`	Patchnames: RHSA-2026:70564 (x86_64)

SUSE Timeline for this CVE

CVE page created: Mon Aug 17 15:27:45 2026
CVE page last modified: Sat Oct 31 13:36:11 2026