CVE-2026-118380
No scoreFix available
Affected packages
| Package | Affected | Fixed |
|---|---|---|
krb5Alpaquita:stream | 1.20.1-r2 up to 1.22.3-r0 | 1.22.3-r0 |
krb5Debian:12 | All versions, plus listed versions 1.20.1-21.20.1-2+deb12u11.20.1-2+deb12u21.20.1-2+deb12u31.20.1-2+deb12u4 Show 18 moreShow less1.20.1-2+deb12u51.20.1-2+loong641.20.1-31.20.1-41.20.1-51.20.1-5.11.20.1-5.1~exp11.20.1-61.21.2-11.21.3-11.21.3-21.21.3-31.21.3-41.21.3-51.22.1-11.22.1-21.22.1-2.11.22.1-3 | None known |
krb5Debian:13 | All versions, plus listed versions 1.21.3-51.21.3-5+deb13u11.22.1-11.22.1-21.22.1-2.11.22.1-3 | None known |
krb5Debian:14 | All versions, plus listed versions 1.21.3-51.22.1-11.22.1-21.22.1-2.11.22.1-3 | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, aliases, facts, references | OSV | |
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-118380 is a vulnerability with no CVSS score yet in krb5, published November 10, 2026. No source lists public exploit code. Fixed in krb5 1.22.3-r0.