Skip to content
fr Sign in
Not rated

CVE-2026-57915 It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized…

Description

It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported type. Users are recommended to upgrade to version 2.1.2, which fixes this issue.

Affected products and versions

Product Affected versions Fixed in
Apache Kerby 2.1 earliest → < 2.1.2 2.1.2
Red Hat AMQ Clients Versions not published
Red Hat JBoss Enterprise Application Platform Expansion Pack Versions not published
streams for Apache Kafka 2 Versions not published
streams for Apache Kafka 3 Versions not published
Red Hat Data Grid 8 Versions not published
Red Hat Fuse 7 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Apache Kerby

The 2 CVEs of Apache Kerby →
CVE-2026-57914 By sending a deeply nested ASN1 structure to a Apache Kerby client or service, it's possible to trigger a… Not rated
Track this CVE