Known Vulnerabilities for GNU SASL by GNU
Listed below are 1 of the newest known vulnerabilities associated with "GNU SASL" by "GNU".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-126616 json | The auto-ban of Progressive Robot hMailServer 6.2.0 through 6.3.3, with a MySQL or MariaDB database, can be kept from banning... | Not Provided | 2026-11-11 | 2026-11-11 |
| CVE-2026-114471 json | Insertion of sensitive information into a log file in the SMTP server of Progressive Robot hMailServer 6.0.0 through 6.3.6 al... | Not Provided | 2026-10-21 | 2026-10-29 |
| CVE-2026-114230 json | When dispatching SASL frames to authenticate the peer, Proton will also dispatch AMQP frames if they claim to be SASL frames.... | Not Provided | 2026-10-29 | 2026-11-05 |
| CVE-2026-110985 json | A Kafka broker using SASL/OAUTHBEARER with the default validator (sasl.oauthbearer.jwt.validator.class=DefaultJwtValidator) ... | Not Provided | 2026-10-28 | 2026-11-05 |
| CVE-2026-110952 json | A Kafka broker that authenticates clients with SASL/OAUTHBEARER using the bundled JWKS-backed validator always verifies the J... | Not Provided | 2026-10-28 | 2026-11-05 |
| CVE-2026-107161 json | A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin computes ... | Not Provided | 2026-10-07 | 2026-11-06 |
| CVE-2026-105311 json | The StreamsHub Console operator acts as a confused deputy: a Kubernetes tenant with permission to create a Console custom res... | Not Provided | 2026-10-20 | 2026-11-03 |
| CVE-2026-104733 json | User Impersonation in ProcessOnes XMMP Server ejabberd <= 26.04 allows an attacker to impersonate arbitrary users via unvalid... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-101296 json | A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non G... | Not Provided | 2026-10-20 | 2026-11-09 |
| CVE-2026-100252 json | Improper Authorization vulnerability in Apache ZooKeeper. When SASL authentication is enabled on the client port, the server... | Not Provided | 2026-11-04 | 2026-11-05 |