CVE-2026-11850 | MIT Kerberos 5 up to 1.22.3 ldap_principal2.c berval2tl_data integer underflow (WID-SEC-2026-1900)

A vulnerability has been found in . Affected by this vulnerability is the function berval2tl_data in the library plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c. Performing a manipulation results in integer underflow.

This vulnerability is cataloged as CVE-2026-11850. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.