What’s Vulnerable › Products

MIT krb5 vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your MIT krb5 version is affected

Latest MIT krb5 vulnerabilities

• CVE-2026-107778 — MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred() (CVSS 6.5)
• CVE-2026-107708 — MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PAC (CVSS 4.9)