CVE-2026-104035
5.5 MEDIUMPublished 2026-10-06 · Updated 2026-10-08
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A flaw was found in SSSD. An issue in the Kerberos Credential Manager (KCM) responder allows a local user to cause a Denial of Service (DoS) by maintaining a persistent connection and repeatedly storing and destroying credentials. Because the service fails to release cached objects from memory when credentials are removed, memory consumption grows continuously, ultimately exhausting available memory and rendering the service unresponsive.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-772
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2026-104031
- MEDIUMCVE-2026-104045
- UNSCOREDCVE-2026-104112PoC
- HIGHCVE-2026-107286PoC
- MEDIUMCVE-2026-107834PoC
- MEDIUMCVE-2026-16678
- MEDIUMCVE-2026-19739PoC
- MEDIUMCVE-2026-19740PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.