Search: CVE-2026-40355

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.9	EPSS 0.6%	CVE-2026-40355MIT Kerberos 5 · NULL Pointer Dereference Medium5.9EPSS 0.6%2026-04-28CVE Database V5CVE-2026-40355 In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the process to terminate in parse_nego_message. EPSS 0.6%Vulnerability CWE-476	CVE Database V5	2026-04-28

Page 1 of 1 · 8 duplicate CVE records merged