Mmastodon TechnologyCybersecurity first seen 10 h ago, last 10 h ago, peak #11

MIT krb5 vulnerability EUVD-2026-95255 rated medium severity

Original: 🚨 EUVD-2026-95255 📊 Score: 6.9/10 (CVSS v3.1) 📦 Product: krb5 🏢 Vendor: MIT 📅 Updated: 2026-10-08 📝 MIT krb5 through 1.2

A new vulnerability, EUVD-2026-95255, has been catalogued for MIT's Kerberos 5 implementation through version 1.22.2. The flaw is a NULL pointer dereference in the KDC's get_pac_princ_with_realm() function, which returns success while leaving the client principal NULL. The issue carries a CVSS v3.1 score of 6.9 out of 10 and was updated on 8 October 2026.

Why now: Security teams monitor new advisories affecting Kerberos, a core authentication component used across enterprise networks.

MITkrb5EUVD-2026-95255

Open on mastodon →

Evidence

• 🚨 EUVD-2026-95255 📊 Score: 6.9/10 (CVSS v3.1) 📦 Product: krb5 🏢 Vendor: MIT 📅 Updated: 2026-10-08 📝 MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/1542328