CVE-2026-40355 is a denial-of-service flaw disclosed in MIT Kerberos 5 before version 1.22.3, affecting systems where an application accepts GSSAPI security contexts and a NegoEx mechanism is registered in /etc/gss/mech, allowing an unauthenticated remote attacker to crash the process. The bug...