MMIT

Products

Exploited and recent CVEs

• CVE-2026-107778 Medium 6.5 MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred() 0.4%
• CVE-2026-107708 Medium 4.9 MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PAC 0.5%
• CVE-2026-40355 Medium 5.9 In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An una 0.6%
• CVE-2026-40356 Medium 5.9 In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism register 0.6%
• CVE-2025-24528 High 7.1 In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bo 0.5%