CVE-2026-129483 Cyrus SASL through 2.1.28 SRP Authentication Bypass via plugins/srp.c

Cyrus SASL through 2.1.28 contains an authentication bypass vulnerability in the SRP server mechanism because srpservermechstep2 does not reject client public values A that are multiples of N. Unauthenticated network clients can send A equal to N to force a zero shared secret, authenticating as a...

CVE-2026-129483

Cyrus SASL versions through 2.1.28 are vulnerable to an authentication bypass in the SRP server mechanism. The flaw exists because the srp_server_mech_step2 function fails to reject client public values A that are multiples of N . An unauthenticated network client can exploit this by sending A eq...