CVE-2026-57915

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-06-26 Modified: 2026-10-25 First seen: 2026-10-29 Status: pending_score

Description

It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported type. Users are recommended to upgrade to version 2.1.2, which fixes this issue.

Weakness Classification (2)

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.53%
Raw Score 0.005260
Percentile 44.5%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00526
2026-10-28
0.00526

Intelligence Sources

nvd ref →