HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-60109 — Zeek before 8.0.9 contains a null pointer dereference vulnerability in its Kerbe...

·Source: NIST NVD

Updated:

Executive Summary

Zeek before 8.0.9 contains a null pointer dereference vulnerability in its Kerberos protocol analyzer that allows unauthenticated remote attackers to crash the sensor by sending a crafted KRB_ERROR message with error-code 25 (KDC_ERR_PREAUTH_REQUIRED) containing a PA-DATA element with padata-type 2, 3, 11, or 19. Attackers can exploit a parser and analyzer state mismatch where proc_padata() derefe

Analysis

Zeek before 8.0.9 contains a null pointer dereference vulnerability in its Kerberos protocol analyzer that allows unauthenticated remote attackers to crash the sensor by sending a crafted KRB_ERROR message with error-code 25 (KDC_ERR_PREAUTH_REQUIRED) containing a PA-DATA element with padata-type 2, 3, 11, or 19. Attackers can exploit a parser and analyzer state mismatch where proc_padata() dereferences an uninitialized pa_data_element field selected by the wrong parsing arm, triggering a crash via a single UDP or TCP packet to port 88 without any credentials or prior authentication. CVSS Score: 7.5. Published: 2026-07-09T15:16:41.757.

Indicators of Compromise (1)

CVE (1)
CVE-2026-60109
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 9, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Cryptohack Roundup: US SEC Eyes July Crypto Rule Proposal

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/cryptohack-roundup-us-sec-eyes-july-crypto-rule-proposal-image_small-10-a-32183.jpg" align=right hspace=4><b>Also: Binance Eyes More Asia Licenses, India Pushes Fresh Crypto Curbs</b><br>This week, the U.S. Securities and Exchange Commission eyes July for a crypto rule proposal, Binance anticipates more Asian business, Malaysia se

Bank Info Security
MEDIUMVulnerabilityNEW

WolfSSL, GeoVision, VTK vulnerabilities

Cisco Talos&#x2019; Vulnerability Discovery & Research team recently disclosed three vulnerabilities in WolfSSF, fourteen in GeoVision, and one vulnerability in VTK-DICOM. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, in adherence to Cisco&#x2019;s third-party vulnerability disclosure policy .&#xA0; For

Cisco Talos
MEDIUMVulnerabilityNEW

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

Datadog Security Labs is warning of "several overlapping campaigns" that are systematically enumerating corporate GitHub organizations, repositories, and user accounts through the GitHub API. "Operators rely on automated scraping tooling with custom or legitimate-sounding user agents, leveraging GitHub 'ghost' accounts that are often years old, or compromised OAuth tokens and personal

The Hacker News