CVE-2026-18147
Awaiting Analysis Awaiting Analysis - Queue

DOM XSS in FreeIPA Web UI Password Reset

Publication date: 2026-09-09

Last updated on: 2026-09-10

Assigner: redhat-SADP

Description
A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting (XSS) vulnerability in the FreeIPA/IdM Web UI password reset page. By enticing a victim to click a specially crafted link and complete a password reset, the attacker could inject and execute arbitrary JavaScript code. This allows the attacker to perform actions within the victim's authenticated session, potentially leading to full administrative control if an IdM administrator is targeted.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-09
Last Modified
2026-09-10
Generated
2026-09-10
AI Q&A
2026-09-10
EPSS Evaluated
N/A
NVD
CVE-2026-18147
EUVD
EUVD-2026-75108

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
redhat freeipa *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-18147 is a DOM Cross-Site Scripting (XSS) vulnerability in the FreeIPA/IdM Web UI password reset page. An unauthenticated remote attacker can trick a victim into clicking a malicious link and completing a password reset. This allows the attacker to inject arbitrary JavaScript code into the victim's session.

Detection Guidance

Detecting this vulnerability requires monitoring for suspicious activity in the FreeIPA/IdM Web UI. Check web server logs for unusual requests to the password reset page, especially those containing JavaScript payloads or unexpected parameters. Inspect network traffic for outbound connections from the web UI to untrusted domains. No specific commands are provided in the resources, but reviewing logs and monitoring user-agent strings or referrer headers may help identify exploitation attempts.

Impact Analysis

If exploited, this vulnerability enables an attacker to perform actions within the victim's authenticated session. If an IdM administrator is targeted, the attacker could gain full administrative control over the identity management system. This could lead to unauthorized access, data theft, or system compromise.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements in GDPR and HIPAA. A successful exploit may result in data breaches, triggering compliance violations, regulatory fines, and reputational damage for organizations handling protected health or personal information.

Mitigation Strategies
  • Restrict network access to the FreeIPA/IdM Web UI to trusted networks only using firewall rules, such as `firewalld` on RHEL to limit access to port 443 from specific IP addresses.
  • Apply vendor patches or updates for FreeIPA as soon as they become available to address the DOM XSS flaw.
  • Monitor the FreeIPA/IdM Web UI for any signs of compromise or unauthorized activity, including unexpected JavaScript execution.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-18147. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart