Topic
2 articles
CyberSecureToday covers Identity Management across 2 articles published between 1 Oct 2026 and 2 Oct 2026.
The coverage includes 2 vulnerability advisories. 2 advisories are rated critical or high severity.
Stories on Identity Management most often intersect with 389 Directory Server, 389-ds-base and LDAP, with Technology, Cloud & SaaS the most affected sector. The most recent story, “389 Directory Server STARTTLS Buffer Injection Flaw Enables On-Path Authentication Bypass (CVE-2026-86345)”, was published 2 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
LinuxA flaw in 389 Directory Server fails to discard buffered plaintext bytes during StartTLS negotiation, enabling on-path attackers to forge successful LDAP authentications.
Threat IntelA privilege escalation vulnerability in Internet2 Grouper before v7.5.1 allows authenticated users with rule editing rights to elevate to full system administrator.