VDB
CVE-2026-40356
CVE-2026-40356
PUBLISHED
CVSS 8.699999809265137 HIGH
Kerberos ist ein verteilter Netzwerkdienst zur Authentifizierung. MIT Kerberos ist die freie Implementierung des "Kerberos network authentication protocol", des Massachusetts Institute of Technology (MIT).
EPSS 0.60% · 46.2th percentile
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.60%
46.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux Update Infrastructure 5.1 | |
| Red Hat | Red Hat Enterprise Linux | |
| IBM | IBM QRadar SIEM <7.5.0 UP15 IF04 | |
| IBM | IBM MQ operator | |
| Debian | Debian Linux | |
| Red Hat | Red Hat Enterprise Linux Cryostat <4.2.0 | |
| RESF | RESF Rocky Linux | |
| Oracle | Oracle Linux | |
| SUSE | SUSE openSUSE | |
| Siemens | Siemens SIMATIC S7 1500 CPU | |
| SUSE | SUSE Linux | |
| Fedora | Fedora Linux | |
| Ubuntu | Ubuntu Linux |
Timeline
- CVE Published
- Apr 27, 2026 PoC Published
- Apr 30, 2026 Security Advisory
- May 13, 2026 Distribution Patch
- May 13, 2026 Security Advisory
- May 17, 2026 Distribution Patch
- May 18, 2026 EPSS Score
- May 19, 2026 EPSS Score
- May 20, 2026 EPSS Score
- May 20, 2026 Distribution Patch
- May 20, 2026 Security Advisory
- May 21, 2026 EPSS Score
References
- https://access.redhat.com/errata/RHSA-2026:12220 advisory
- https://access.redhat.com/errata/RHSA-2026:16799 advisory
- https://access.redhat.com/errata/RHSA-2026:19357 advisory
- https://access.redhat.com/errata/RHSA-2026:19145 advisory
- https://security-tracker.debian.org/tracker/DSA-6293-1 advisory
- https://access.redhat.com/errata/RHSA-2026:17789 advisory
- https://access.redhat.com/errata/RHSA-2026:21275 advisory
- https://lists.debian.org/debian-lts-announce/2026/05/msg00047.html advisory
- https://access.redhat.com/errata/RHSA-2026:22634 advisory
- https://access.redhat.com/errata/RHSA-2026:24685 advisory
- https://access.redhat.com/errata/RHSA-2026:24683 advisory
- https://access.redhat.com/errata/RHSA-2026:24686 advisory
- https://access.redhat.com/errata/RHSA-2026:29197 advisory
- https://access.redhat.com/errata/RHSA-2026:43692 advisory
- https://ubuntu.com/security/notices/USN-8585-1 advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1290.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1290 advisory
- https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html advisory
- https://seclists.org/oss-sec/2026/q2/235 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2026-2e9fe57a46 advisory
…and 20 more