Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-28 | 3 | Disclosure1General2 |
| 2026-04-29 | 2 | Disclosure2 |
CVE-2026-40355, CVE-2026-40356: MIT krb5 1.18+ Unauthenticated Network read overrun and null pointer dereference https://www.openwall.com/lists/oss-security/2026/04/27/8
Post summary
The text announces two new MIT krb5 vulnerabilities (CVE‑2026‑40355 and CVE‑2026‑40356) affecting versions 1.18+, detailing read overrun and null pointer dereference issues, with reference to a security mailing list.
🚨*CVE* CVE-2026-40356 In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a syste… https://www.cve.org/CVERecord?id=CVE-2026-40356 ----- Traducción: CVE-2026-40356 En … http://infoflow.cloud`
Post summary
The post announces CVE-2026-40356, an integer underflow in MIT Kerberos 5 prior to 1.22.3 that can lead to an out-of-bounds read when gss_accept_sec_context() is called.
CVE-2026-40356 In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a syste… https://www.cve.org/CVERecord?id=CVE-2026-40356
Post summary
The text discloses that before version 1.22.3 of MIT Kerberos 5, an integer underflow in gss_accept_sec_context() results in an out-of-bounds read.
CVE-2026-40356 CVE-2026-40355, CVE-2026-40356 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-40356
Post summary
The content merely lists CVE-2026-40356 (and CVE-2026-40355) and offers a link to a vulnerability details page, without additional information about the vulnerability or its exploitation.
CVE-2026-40355 CVE-2026-40355, CVE-2026-40356 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-40355
Post summary
The text lists CVE identifiers and a link to a vulnerability details page, without providing additional detail or context.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mit | kerberos_5 | - | - | - |