CVE-2026-57915

HighCVSS 7.3

Published: 26/06/2026(UTC)Updated: 03/08/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

25th percentile - higher than 25% of all known CVEs

Summary

A vulnerability in Apache Kerby allows bypassing the Kerberos pre-authentication check by sending a PA-DATA with an unrecognized or unsupported type. The issue is fixed in version 2.1.2.

Risk Assessment

An attacker can gain unauthorized access to systems authenticated via Kerberos, potentially leading to data and service compromise.

Recommendation

Upgrade Apache Kerby to version 2.1.2 or later immediately.

Other vulnerabilities in Apache Kerby

CVE-2026-57914Medium
Sending a deeply nested ASN1 structure to an Apache Kerby client or service can trigger a StackOverFlow exception, leading to denial of service (DoS).

Original NVD description (English source)

It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported type. Users are recommended to upgrade to version 2.1.2, which fixes this issue.