Bypass Vulnerability in Apache Kerby Affecting Kerberos Authentication

CVE-2026-57915

What is CVE-2026-57915?

A bypass vulnerability has been identified in Apache Kerby that allows attackers to circumvent the Kerberos pre-authentication check by sending a PA-DATA request with an unsupported type. This vulnerability could potentially lead to unauthorized access or authentication flaws, posing security risks for users of the affected software. It is strongly recommended that users upgrade to version 2.1.2 or later, which addresses and resolves this issue effectively.

References