Kerberos

FreeIPA LDAP ACI Vulnerability Chain Grants Anonymous Clients Domain Admin Rights

Red Hat patched CVE-2026-76578 (CVSS 9.8) in FreeIPA and 389 Directory Server, where an LDAP Access Control Instruction flaw allowed unauthenticated clients to create permanent domain admins.