Known Vulnerabilities for GNU SASL by GNU
Listed below are 1 of the newest known vulnerabilities associated with "GNU SASL" by "GNU".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-107161 json | A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin computes ... | Not Provided | 2026-10-07 | 2026-10-10 |
| CVE-2026-105311 json | The StreamsHub Console operator acts as a confused deputy: a Kubernetes tenant with permission to create a Console custom res... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-104733 json | User Impersonation in ProcessOnes XMMP Server ejabberd <= 26.04 allows an attacker to impersonate arbitrary users via unvalid... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-101296 json | A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non G... | Not Provided | 2026-10-20 | 2026-10-21 |
| CVE-2026-88035 json | A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name ... | Not Provided | 2026-09-10 | 2026-09-10 |
| CVE-2026-86219 json | Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce ... | Not Provided | 2026-09-06 | 2026-09-08 |
| CVE-2026-82435 json | Description The worker's Netty message decoder is installed ahead of the SASL authentication handlers in the pipeline and ac... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-82434 json | Description When ZooKeeper authentication is configured, Storm deliberately retains `storm.zookeeper.topology.auth.payload` ... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-81520 json | A network-reachable client that has not yet authenticated can hold a MongoDB Connector for BI authentication session open ind... | Not Provided | 2026-08-28 | 2026-08-31 |
| CVE-2026-78701 json | A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication ... | Not Provided | 2026-08-25 | 2026-10-08 |