CVE-2026-81627 – Red Hat Enterprise Linux 10

CVSS 8.2 IMPORTANT [2] Critical – Same Day Deployment

“When one unauthenticated request can make an attacker an identity administrator, every system that trusts that directory is already exposed.”

This Red Hat Enterprise Linux 10 update fixes 27 vulnerabilities in identity services, virtualization, package handling, and document processing. The most serious is CVE-2026-76578, with a CVSS score of 9.8, Critical severity. It lets a remote, unauthenticated attacker add themselves to the FreeIPA administrators group and take control of directory and identity operations. Other identity and certificate flaws make the risk worse: CVE-2026-79678 and CVE-2026-80110 each have a CVSS score of 8.1, High severity, and CVE-2026-76561 has a CVSS score of 7.2, High severity. Together, they allow server data to be read, certificate authority permissions to be bypassed, and commands to run inside the certificate service.

The virtualization fixes close guest-to-host escape paths in QEMU and libslirp. CVE-2026-93834 has a CVSS score of 8.8, High severity, CVE-2026-81627 has a CVSS score of 8.2, High severity, and CVE-2026-95508 has a CVSS score of 7.4, High severity. Public proof-of-concept code exists for CVE-2026-93834, CVE-2026-81627, CVE-2026-86320, and CVE-2026-96889. The libsoup flaws CVE-2026-102557, CVE-2026-102558, CVE-2026-102559, and CVE-2026-102560 each have a CVSS score of 8.6, High severity, and CVE-2026-102555 has a CVSS score of 8.2, High severity. In rpm, CVE-2026-95519 and CVE-2026-95521 each have a CVSS score of 7.8, High severity, and CVE-2026-103242 and CVE-2026-95520 each have a CVSS score of 7.1, High severity. These flaws let a crafted package or manifest run code.

The update also hardens Flatpak and its sandboxing tools against writes to host files as root. CVE-2026-96275 and CVE-2026-87766 each have a CVSS score of 8.8, High severity, CVE-2026-86320 has a CVSS score of 7.8, High severity, and CVE-2026-97023 and CVE-2026-97024 each have a CVSS score of 7.1, High severity. Crafted documents and images can run code through Ghostscript, GIMP, and librsvg: CVE-2026-101258, CVE-2026-106062, and CVE-2026-96889 each have a CVSS score of 7.8, High severity. The sudo flaw CVE-2026-96512 and the crun flaw CVE-2026-84042 each have a CVSS score of 7.8, High severity, and the Cyrus SASL flaw CVE-2026-107161 has a CVSS score of 7.5, High severity.

Key Details

Attack Vector: Local
Attack Complexity: Low
Privileges Required: High
User Interaction: None
CWE Classification: CWE-787

Patch this CVE on all your endpoints in under 5 minutes. First 200 endpoints are free forever, scale as needed.