Apache Apache Kerby
2 CVEs affecting Apache Apache Kerby. Latest disclosed: 2026-06-26. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-57915 | High | 7.3 | 2026-06-26 | It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported type. Users are recomme… |
CVE-2026-57914 | Medium | 6.5 | 2026-06-26 | By sending a deeply nested ASN1 structure to a Apache Kerby client or service, it's possible to trigger a StackOverFlow Exception which can lead to denial of s… |