GS
Product
GNU SASL
by GNU · last CVE Jun 23, 2026
3
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch

Add GNU SASL to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-56968
5.3
0%
Jun 23
GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server
Affected: before 2.2.4
Showing 1