CVE-2026-11850 | MIT Kerberos 5 up to 1.22.3 ldap_principal2.c berval2tl_data integer underflow

A vulnerability has been found in MIT Kerberos 5 and classified as problematic. Affected by this vulnerability is the function berval2tl_data in the library plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c. Performing a manipulation results in integer underflow.

This vulnerability is cataloged as CVE-2026-11850. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.