CVE-2026-57915

medium Apache
EPSS Score
0.3%
Exploitation probability in 30 days
Top 75% most likely to be exploited
Published: June 26, 2026 (72 days ago)
Last Modified: August 3, 2026
Vendor: Apache
Source: MITRE

Description

It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported type. Users are recommended to upgrade to version 2.1.2, which fixes this issue.

CWE

CWE-304

Affected Products

Apache Software Foundation Apache Kerby

References

🔗 lists.apache.org