Apache Kerby (Apache Software Foundation) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-06-26. Vendor: Apache Software Foundation.

CVEs of Apache Kerby

• CVE-2026-57915 - CVSS 7.3 (high), 2026-06-26: It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported type. Users are…
• CVE-2026-57914 - CVSS 6.5 (medium), 2026-06-26: By sending a deeply nested ASN1 structure to a Apache Kerby client or service, it's possible to trigger a StackOverFlow Exception which can lead to denial of…