1036 matches found
CVE-2026-101296 Apache Tomcat: JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanisms
A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non GSSAPI SASL authentication mechanism allowed attackers to authenticate without providing the correct password. This issue affects Apache Tomcat: from 11.0.0-M1 through...
EUVD-2026-105010
A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non GSSAPI SASL authentication mechanism allowed attackers to authenticate without providing the correct password. This issue affects Apache Tomcat: from 11.0.0-M1 through...
CVE-2026-101296 Apache Tomcat: JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanisms
A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non GSSAPI SASL authentication mechanism allowed attackers to authenticate without providing the correct password. This issue affects Apache Tomcat: from 11.0.0-M1 through...
CVE-2026-101296
A missing verification step in Apache Tomcat allows an unauthenticated remote attacker to bypass authentication when the JNDI realm is configured with a non-GSSAPI SASL mechanism. This flaw enables unauthorized access to protected resources by allowing authentication without a correct password. A...
tomcat: tomcat: Authentication bypass via non-GSSAPI SASL in JNDI realm
A flaw was found in Apache Tomcat. When the Java Naming and Directory Interface JNDI realm is configured with a non-Generic Security Service Application Program Interface GSSAPI Simple Authentication and Security Layer SASL mechanism, a missing verification step allows an attacker to bypass...
CLEANSTART-2026-CZ18029 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption
Security vulnerability affects the tempo package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption...
PT-2026-118373
Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.26 Apache Tomcat versions 10.1.0-M1 through 10.1.60 Apache Tomcat versions 9.0.0.M1 through 9.0.122 Apache Tomcat versions 8.5.0 through 8.5.100 Apache Tomcat versions 7.0.0 through 7.0.109...
RHEL 10 : openssh (RHSA-2026:85847)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:85847 advisory. OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files...
ALSA-2026:85847 Moderate: openssh security update
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw CVE-2026-599...
openssh security update
9.9p1-29.0.1 - Upstream references found with /usr/bin/ssh Orabug: 37824421 9.9p1-29 - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-276225 - CVE-2026-59997: Fix internal-sftp server argument parsing limit Resolves: RHEL-276232 - CVE-2026-60000: Fix DoS via...
ALSA-2026:85958 Moderate: openssh security update
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw CVE-2026-599...
CentOS 9 : openssh-9.9p1-16.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the openssh-9.9p1-16.el9 build changelog. - Document caveat regarding GSSAPIStrictAcceptorCheck CVE-2026-59998 - Fix internal-sftp server argument parsing limit CVE-2026-59997 - Fi...
Moderate: openssh security update
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw CVE-2026-599...
CVE-2026-106553
A flaw was found in OpenSSH. When Generic Security Services Application Programming Interface GSSAPI authentication is enabled, the SSH daemon fails to properly discard credentials after a failed authentication attempt. If a user subsequently authenticates through another method, the leftover...
openssh: OpenSSH: Information disclosure via GSSAPI authentication state persistence
A flaw was found in OpenSSH's SSH daemon sshd. When Generic Security Service Application Program Interface GSSAPI authentication is enabled, authentication state can improperly persist across separate authentication attempts. A local user could exploit this condition during sequential...
curl: Redirect to imap/pop3/smtp (SASL) or sftp/scp (libssh) authenticates to the attacker's host with the user's ambient Kerberos credentials
Summary: When curl follows a redirect to an IMAP, POP3 or SMTP URL carrying any userinfo imap://@attacker.example/ is enough, it authenticates to the redirect target with SASL GSSAPI out of the user's default Kerberos credential cache, although no credentials and no authentication method were...
UBUNTU-CVE-2026-110924
A flaw was found in OpenSSH. With GSSAPI authentication enabled, a failed GSSAPI attempt can leave delegated credentials stored for the connection even though user authorization did not succeed. A later successful login on that connection is not authorized by the leftover state...
CVE-2026-110924
A flaw was found in OpenSSH. With GSSAPI authentication enabled, a failed GSSAPI attempt can leave delegated credentials stored for the connection even though user authorization did not succeed. A later successful login on that connection is not authorized by the leftover state...
Astra Linux – Vulnerability in Heimdal
The fix for CVE-2022-3437 involved changing the memcmp function to run in constant time, as well as providing a workaround for a compiler bug by adding comparisons of the result with the value “!= 0” to the memcmp function. When these patches were backported to the heimdal-7.7.1 and heimdal-7.8.0...
