Vulnerability Details CVE-2026-56968
GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 13.7%
CVSS Severity
CVSS v3 Score 3.7
References
Products affected by CVE-2026-56968
-
cpe:2.3:a:gnu:sasl:*
-
cpe:2.3:o:debian:debian_linux:13.0