Known Vulnerabilities for Kerberos 5 by MIT
Listed below are 10 of the newest known vulnerabilities associated with "Kerberos 5" by "MIT".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-126615 json | The sign-in of Progressive Robot hMailServer 6.2.22-pre2 through 6.3.7 takes for an account names that are not its address bu... | Not Provided | 2026-11-11 | 2026-11-11 |
| CVE-2026-122164 json | Weak authentication in Windows Kerberos allows an authorized attacker to elevate privileges over a network. | Not Provided | 2026-11-10 | 2026-11-11 |
| CVE-2026-121956 json | FreeRDP before 3.32.2 contains a double free in the WinPR Kerberos SSPI retrieveSomeTgt function, which installs the krb5 def... | Not Provided | 2026-11-04 | 2026-11-04 |
| CVE-2026-120804 json | A flaw exists in the server-side SSPI Kerberos authentication handler on Windows Enterprise builds of MongoDB. When processin... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-119940 json | Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to deny service over a network. | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-119847 json | Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-119079 json | decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element ar... | Not Provided | 2026-11-09 | 2026-11-09 |
| CVE-2026-116244 json | When a pgAdmin 4 connection was not meant to use a Kerberos user's delegated credentials, pgAdmin removed KRB5CCNAME from its... | Not Provided | 2026-10-30 | 2026-11-06 |
| CVE-2026-116239 json | In server mode pgAdmin 4 keeps an account per authentication source, so the same username can exist as, for example, an inter... | Not Provided | 2026-10-30 | 2026-11-06 |
| CVE-2026-116238 json | In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATTEMPTS failed logins (3 by default). The limit could be ... | Not Provided | 2026-10-30 | 2026-11-06 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mit | Kerberos 5 | 16.3 | |||
| Application | Mit | Kerberos 5 | 1.9.5 | |||
| Application | Mit | Kerberos 5 | 1.9.4 | |||
| Application | Mit | Kerberos 5 | 1.9.3 | |||
| Application | Mit | Kerberos 5 | 1.9.2 | |||
| Application | Mit | Kerberos 5 | 1.9.1 | |||
| Application | Mit | Kerberos 5 | 1.9 | |||
| Application | Mit | Kerberos 5 | 1.8.6 | |||
| Application | Mit | Kerberos 5 | 1.8.5 | |||
| Application | Mit | Kerberos 5 | 1.8.4 | |||
| Application | Mit | Kerberos 5 | 1.8.3 | |||
| Application | Mit | Kerberos 5 | 1.8.2 | |||
| Application | Mit | Kerberos 5 | 1.8.1 | |||
| Application | Mit | Kerberos 5 | 1.8 | |||
| Application | Mit | Kerberos 5 | 1.7.2 | |||
| Application | Mit | Kerberos 5 | 1.7.1 | |||
| Application | Mit | Kerberos 5 | 1.7 | |||
| Application | Mit | Kerberos 5 | 1.6.3 | |||
| Application | Mit | Kerberos 5 | 1.6.2 | |||
| Application | Mit | Kerberos 5 | 1.6.1 |