high7.3
CVE-2026-57915
It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported type.
Impact
It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported type. Users are recommended to upgrade to version 2.1.2, which fixes this issue.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
Weakness classification
References
- NVD record
- CVE.org record
- https://lists.apache.org/thread/1y3glgh3kzwoxo5m2lq504cjlh1dsrfh
- http://www.openwall.com/lists/oss-security/2026/06/26/8
- https://access.redhat.com/security/cve/CVE-2026-57915
- https://bugzilla.redhat.com/show_bug.cgi?id=2493407
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57915.json