Skip to main content
CVE-2026-71199VulnerabilityPublished Updated

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Affects Red HatSource GCVE Database

0
Compare

Mentioned vulnerabilities

Not known to be exploited.

Data as of 13 Nov 2026, 14:33 UTC

Severity
High

Rated by Threat Radar · CVSS not yet scored by NVD

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 10 Nov 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 13 Nov 2026.

What to do

AI-suggested

Red Hat has released updated krb5 RPM packages that address these vulnerabilities. Users should apply these updates to their Red Hat Hardened Images. Additionally, to mitigate the impact of CVE-2026-107364, restrict network access to the KDC ports (UDP/TCP 88) to trusted client networks or disable the KDC service on systems not functioning as identity controllers. Disabling the KDC service can be done via systemctl commands, and network restrictions can be applied using firewalld rules as documented. Note that disabling the KDC service or blocking network access will disrupt Kerberos authentication and single sign-on services. Applying the provided updates is the recommended remediation.

Description

This Red Hat security advisory addresses multiple vulnerabilities in the krb5 package included in Red Hat Hardened Images RPMs. The vulnerabilities include a notable denial-of-service (DoS) issue (CVE-2026-107364) where an unauthenticated attacker can cause the Kerberos Key Distribution Center (KDC) daemon to crash by triggering a large read overrun. The KDC service is typically not enabled by default and is confined to dedicated identity management servers. The update provides patched RPMs for various krb5 components across multiple architectures.

References

Community reviews

Loading reviews…