Home Today’s Briefing Deep Dives In Play Trending For You Discover My Stack Saved Off Radar Search

Loading today’s stories

Today

AI-assisted reporting, grounded in a per-article claim ledger. Perspective Coverage and Reality Strip separate source viewpoints from evidence, adoption, hype, incentives, and confidence.

Today

Front Page
Today’s Briefing
Newsletters
Trending
For You
Discover
My Stack
Saved
Off Radar
Search

Sections

Security
Build
Invest
Product
Leadership
Science

Company

About
Mission
How this is made
Evidence Index
The desks
The sources we read
Corrections
Press and brand
The daily edition

Trending now

AI Data Centre Buildout
AI Safety Evaluation
Developer productivity
Code review
Open-Weight Model Publishing
Sandbox Isolation
Remote Code Execution Surfaces
Post-Quantum Cryptography
Zero-Day Exploitation
Humanoid Robots

How this is made

Today For You My Stack Off Radar Search

CVE-2026-76560 — security_identifier — Clarity Today

security_identifier

CVE-2026-76560

CVE identifier for a 389 Directory Server defect in which the owner-only access control rule type compares client and stored names as plain text, so an empty client name matches an empty stored value.

Current clusters

security1 publisher

An unauthenticated LDAP client can write itself into FreeIPA's administrators group

CVE-2026-76578 pairs a default FreeIPA access rule with a 389 Directory Server ownership check that an empty name satisfies, and Red Hat says it reproduced the chain twice on a stock install. The fix is 4.13.4.

Publishers:thehackernews.com

Reality

Evidence76
Adoption30
Hype gap+15
Incentives58

Confidence62