https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T14:41:57.384306+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-384812 EUVD-2026-384812 2026-10-15T14:41:57.387821+00:00 EUVD-2026-384812 https://cve.radiocsirt.org/vuln/fkie_cve-2026-107778 fkie_cve-2026-107778 2026-10-15T14:41:57.387864+00:00

MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-xfjm-wc9w-mmc6 GHSA-xfjm-wc9w-mmc6 2026-10-15T14:41:57.387908+00:00

MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service.

 https://cve.radiocsirt.org/vuln/rhsa-2026:80481 RHSA-2026:80481 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-15T14:41:57.387940+00:00

krb5: krb5: Denial of Service via malformed PAC in S4U2Proxy requests krb5: krb5: Denial of Service via crafted forwarded credentials