Security Advisory

CVE-2026-57915

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-26 12:09:54
Last updated 2026-07-15 00:42:06
Assigner apache
CVSS score not scored
State PUBLISHED

Description

It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported type. Users are recommended to upgrade to version 2.1.2, which fixes this issue.