What’s Vulnerable › Vulnerabilities

CVE-2026-91926: Gss-ntlmssp: gss-ntlmssp: memory leak in ntlm_decode_target_info via duplicated av_pair entries in ntlm challenge

• Severity: low (CVSS 3.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-15 · updated 2026-09-17
• Weakness: CWE-401

Description

A flaw was found in gss-ntlmssp. A memory leak occurs in the NTLM target-info parser when a crafted NTLM CHALLENGE message contains duplicated string-valued AV_PAIR entries. The parser allocates memory for each string value but does not free the previous allocation when the same AV_PAIR type appears more than once, leaking the earlier allocation. A malicious or man-in-the-middle server can exploit this to cause gradual memory exhaustion on the client during NTLM authentication, leading to a denial of service.

Affected products

• Red Hat Enterprise Linux 8: all versions

References

• https://access.redhat.com/security/cve/CVE-2026-91926
• https://bugzilla.redhat.com/show_bug.cgi?id=2533698

Get alerted when CVE-2026-91926 or the next vulnerability affects your stack