libssh: libssh: authentication bypass via missing GSSAPI principal check

A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users...

CVE-2026-59851

A vulnerability in libssh affects servers with GSSAPIKeyExchange enabled. The gssapi-keyex path does not verify that the authenticated Kerberos principal is authorized for the requested local user, enabling authenticated clients to log in as arbitrary users. This is reported across multiple sourc...

CVE-2026-59851

A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the gssapi-keyex process due to missing verification of the Kerberos principal's authorization for the requested local user. An attacker can gain unauthorized access as arbitrary users by exploiting this flaw...

CLSA-2026-1778881463 ipa: Fix of 3 CVEs

CVE-2023-5455: fix CSRF vulnerability by adding Referer header check to all session endpoints - CVE-2024-1481: validate Kerberos principal name before kinit and pass it with -- separator to prevent option injection - CVE-2024-11029: scrub administrative passwords from process command line and...

CLSA-2025-1764028069 sssd: Fix of CVE-2025-11561

CVE-2025-11561: prevent unexpected Kerberos principal-to-account mappings when SSSD's localauth plugin cannot resolve a principal...

EUVD-2008-0058

Malware in sbrugna...

Exploit for CVE-2025-4404

CVE-2025-4404 POC POC for CVE-2025-4404 If you have a domain...

CVE-2008-0045

Unspecified vulnerability in AFP Server in Apple Mac OS X 10.4.11 allows remote attackers to bypass cross-realm authentication via unknown manipulations of Kerberos principal realm names...

Cross site scripting

Unspecified vulnerability in AFP Server in Apple Mac OS X 10.4.11 allows remote attackers to bypass cross-realm authentication via unknown manipulations of Kerberos principal realm names...

openSUSE 10 Security Update : samba (samba-1830)

Prevent potential crash in winbindd's credential cache handling; 184450. - Fix memory exhaustion DoS; CVE-2006-3403; 190468. - Fix the munlock call, samba.org svn rev r16755 from Volker. - Change the kerberos principal for LDAP authentication to netbios-name$@realm from host/name@realm; 184450. -...