VDB
CVE-2026-40355
CVE-2026-40355
PUBLISHED
CVSS 8.699999809265137 HIGH
Kerberos ist ein verteilter Netzwerkdienst zur Authentifizierung. MIT Kerberos ist die freie Implementierung des "Kerberos network authentication protocol", des Massachusetts Institute of Technology (MIT).
EPSS 0.61% · 47.8th percentile
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.61%
47.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian | Debian Linux | |
| Red Hat | Red Hat Enterprise Linux | |
| SUSE | SUSE Linux | |
| RESF | RESF Rocky Linux | |
| IBM | IBM MQ operator | |
| SUSE | SUSE openSUSE | |
| Ubuntu | Ubuntu Linux | |
| Oracle | Oracle Linux | |
| IBM | IBM QRadar SIEM <7.5.0 UP15 IF04 | |
| Fedora | Fedora Linux | |
| Red Hat | Red Hat Enterprise Linux Update Infrastructure 5.1 | |
| Red Hat | Red Hat Enterprise Linux Cryostat <4.2.0 | |
| Siemens | Siemens SIMATIC S7 1500 CPU |
Timeline
- CVE Published
- Apr 27, 2026 PoC Published
- May 13, 2026 Distribution Patch
- May 13, 2026 Security Advisory
- May 13, 2026 Security Advisory
- May 17, 2026 Distribution Patch
- May 18, 2026 EPSS Score
- May 19, 2026 EPSS Score
- May 20, 2026 EPSS Score
- May 20, 2026 Distribution Patch
- May 20, 2026 Security Advisory
- May 21, 2026 EPSS Score
References
- https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f fix
- https://access.redhat.com/errata/RHSA-2026:12220 advisory
- https://access.redhat.com/errata/RHSA-2026:16799 advisory
- https://access.redhat.com/errata/RHSA-2026:19357 advisory
- https://access.redhat.com/errata/RHSA-2026:19145 advisory
- https://security-tracker.debian.org/tracker/DSA-6293-1 advisory
- https://access.redhat.com/errata/RHSA-2026:17789 advisory
- https://access.redhat.com/errata/RHSA-2026:21275 advisory
- https://lists.debian.org/debian-lts-announce/2026/05/msg00047.html advisory
- https://access.redhat.com/errata/RHSA-2026:22634 advisory
- https://access.redhat.com/errata/RHSA-2026:24685 advisory
- https://access.redhat.com/errata/RHSA-2026:24683 advisory
- https://access.redhat.com/errata/RHSA-2026:24686 advisory
- https://access.redhat.com/errata/RHSA-2026:29197 advisory
- https://access.redhat.com/errata/RHSA-2026:43692 advisory
- https://ubuntu.com/security/notices/USN-8585-1 advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1290.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1290 advisory
- https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html advisory
- https://seclists.org/oss-sec/2026/q2/235 advisory
…and 20 more