Executive brief
A vulnerability in the authentication module can be exploited by an authenticated remote attacker who controls a malicious authentication server. A successful attack could result in service disruption or allow the attacker to run malicious code with elevated privileges on the affected system.
Technical details
The authentication module improperly processes malformed or truncated input from authentication servers, creating a vulnerability exploitable only by authenticated attackers with the ability to present a compromised or hostile authentication server. The attack vector requires network access and valid authentication credentials. Successful exploitation can lead to denial-of-service conditions or remote code execution with elevated privileges. CVSS score of 8.8 indicates high severity; patch availability should be confirmed with the vendor.
Timeline
- 2026-09-01: disclosed
- other: CVE-2026-73750 assigned