CVE-2026-79901 boks_keytabmd - Authentication Bypass

boks_keytabmd contains a predictable password generation vulnerability caused by seeding with the current Unix timestamp, letting attackers reproduce and verify Active Directory service-account passwords offline, exploit requires knowledge of service principal and password-change time estimation.

CVSS base score 9.9 /10
Critical
CISA KEV
Not listed
Public exploit
None known
EPSS
0.27% chance of exploitation in 30 days
View the NVD record ↗

Details

Type
Authentication Bypass
Impact
Information Disclosure
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Published
1 October 2026
Updated
15 October 2026
Weakness
CWE-338

Vendor fix

Update to the latest version with improved password generation mechanisms.

Patching closes this CVE. It does not tell you which of your systems run the affected version, or what else is exposed alongside them.

References

← All CVEs