CVE-2026-57915

ADVISORY - github

Summary

It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported type. Users are recommended to upgrade to version 2.1.2, which fixes this issue.

EPSS Score⁠: 0.00526 (0.445)

Common Weakness Enumeration (CWE)

ADVISORY - nist

Missing Critical Step in Authentication

Improperly Implemented Security Check for Standard

ADVISORY - github

Missing Critical Step in Authentication

Improperly Implemented Security Check for Standard

ADVISORY - redhat

Improperly Implemented Security Check for Standard


NIST

CREATED

UPDATED

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)

CVSS SCORE

7.3high

GitHub

CREATED

UPDATED

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)

CVSS SCORE

7.3high

Red Hat

CREATED

UPDATED

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)

CVSS SCORE

7.3high