Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2952▲ 19 respecto a la semana anterior
Críticas / altas1451▲ 188 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)272▼ 254 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (7.3) | 0.53% | — | Apache KerbyAI | 26/6/2026 | 3/8/2026 | It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported type. Users are recommended to upgrade to version 2.1.2, which fixes this issue. | |
| Aplazada | Media (6.5) | 0.44% | — | Apache KerbyAI | 26/6/2026 | 26/6/2026 | By sending a deeply nested ASN1 structure to a Apache Kerby client or service, it's possible to trigger a StackOverFlow Exception which can lead to denial of service issues. Users are recommended to upgrade to version 2.1.2, which fixes this issue. | |
| Analizada | Crítica (9.8) | 1.5% | — | Apache Kerby Ldap Backend | 20/2/2023 | 17/6/2026 | An LDAP Injection vulnerability exists in the LdapIdentityBackend of Apache Kerby before 2.0.3. |