OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-104029

LOW · CVSS 3.3 EPSS 0.10% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-10-05 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

A flaw in SSSD allows local attackers to exploit the autofs responder UNIX socket by sending specially crafted requests, leading to an out-of-bounds memory read due to improper buffer offset calculation. This vulnerability can cause the autofs responder process to crash, resulting in a denial of service (DoS). Organizations using SSSD should prioritize addressing this issue to maintain service availability and prevent potential disruptions.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-104029
Severity
LOW
CVSS
3.3
EPSS
0.10%

Original NVD Description

A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the autofs responder UNIX socket. Due to improper buffer offset calculation during request parsing, the service performs an out-of-bounds memory read. This flaw can cause the autofs responder process to crash, resulting in a denial of service (DoS).