CVE-2026-57915

It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported type. Users are recommended to upgrade to version 2.1.2, which fixes this issue...

CVE-2026-57915

A flaw in Apache Kerby allows an attacker to bypass the Kerberos pre-authentication check by sending a Pre-Authentication Data (PA-DATA) packet containing an unrecognized or unsupported type. This vulnerability, identified as CWE-304 , can lead to unauthorized access or impersonation within a Ker...