krb5

Trends

1
MIT krb5 vulnerability EUVD-2026-95255 rated medium severity●🚨 EUVD-2026-95255 📊 Score: 6.9/10 (CVSS v3.1) 📦 Product: krb5 🏢 Vendor: MIT 📅 Updated: 2026-10-08 📝 MIT krb5 through 1.2Mmastodon Technology Cybersecurity03 d ago
A new vulnerability, EUVD-2026-95255, has been catalogued for MIT's Kerberos 5 implementation through version 1.22.2. The flaw is a NULL pointer dereference in the KDC's get_pac_princ_with_realm() function, which returns success while leaving the client principal NULL. The issue carries a CVSS v3.1 score of 6.9 out of 10 and was updated on 8 October 2026.
2
MIT Kerberos 5 vulnerability could let clients crash services●🚨 EUVD-2026-95256 📊 Score: 7.1/10 (CVSS v3.1) 📦 Product: krb5 🏢 Vendor: MIT 📅 Updated: 2026-10-08 📝 MIT Kerberos 5 (krb5Mmastodon Technology Cybersecurity03 d ago
A newly catalogued vulnerability, EUVD-2026-95256, affects MIT Kerberos 5 (krb5) through version 1.22.2. The flaw is a NULL pointer dereference in the make_cred_list() function in rd_cred.c, which could allow authenticated Kerberos clients to crash services by sending crafted credential data. The issue carries a CVSS v3.1 score of 7.1 out of 10 and was updated on 8 October 2026. Administrators running Kerberos authentication infrastructure are expected to monitor for patches from MIT.