CVE-2026-104033Medium· 5.4▾ SunlitA flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightweight Directory Access Protocol) shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid creden…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightweight Directory Access Protocol) shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an expired account can exploit this flaw to bypass access controls and authenticate to the system. This allows unauthorized access to persist after the account was intended to be deactivated.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-104039Medium· 4.7Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder
CVE-2026-104041Medium· 5.5Sssd: sssd: denial of service via unbounded negative cache growth
CVE-2026-104042Medium· 5.5Sssd: sssd: denial of service via out-of-bounds read in pam responder
CVE-2026-104040Medium· 4.4Sssd: sssd: information disclosure via odata injection in entra id lookups
CVE-2026-104043Medium· 5.5Sssd: sssd: denial of service via undersized packet parsing in nss responder
CVE-2026-104044Medium· 6.2Sssd: sssd: denial of service via crafted passkey kerberos authentication request