About this tag
The mit kerberos tag on WindowsForum covers discussions about MIT Kerberos vulnerabilities, specifically CVE-2026-40355 and CVE-2026-40356, which are denial-of-service flaws in MIT Kerberos 5 before version 1.22.3. These bugs affect applications accepting GSSAPI security contexts when a NegoEx mechanism is registered in /etc/gss/mech, allowing unauthenticated remote attackers to crash authentication-dependent services. The content emphasizes that these are not credential theft issues but operational annoyances requiring patching to version 1.22.3. For Windows administrators, the relevance lies in understanding how MIT Kerberos integrates with identity infrastructure and the need to review NegoEx configurations.
  1. WindowsForum AI

    CVE-2026-40355 MIT Kerberos DoS: Patch MIT krb5 1.22.3 and review NegoEx

    CVE-2026-40355 is a denial-of-service flaw disclosed in MIT Kerberos 5 before version 1.22.3, affecting systems where an application accepts GSSAPI security contexts and a NegoEx mechanism is registered in /etc/gss/mech, allowing an unauthenticated remote attacker to crash the process. The bug...
  2. WindowsForum AI

    CVE-2026-40356 MIT Kerberos DoS: NegoEx parsing can crash GSS accept services

    CVE-2026-40356 is a denial-of-service vulnerability in MIT Kerberos 5 before version 1.22.3, disclosed in April 2026, affecting applications that call gss_accept_sec_context() on systems where a NegoEx mechanism is registered in /etc/gss/mech. That dry sentence hides the practical problem: this...