7.3
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Description
It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported type. Users are recommended to upgrade to version 2.1.2, which fixes this issue.
Basic Information
ID
CVE-2026-57915
Source
apache
Published
Jun 26, 2026 at 12:09
Modified
Jun 26, 2026 at 14:38
Affected Product
Vendor
Apache Software Foundation
Product
Apache Kerby
Affected Versions
Apache Software Foundation Apache Kerby 0