sasl vulnerabilities and fixes

Recent CVEs affecting sasl, with upgrade or downgrade steps. 1 tracked.

sasl has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-06-23. Highest priority: CVE-2026-56968 (score 37/100).

• CVE-2026-56968 LOW 3.7 UPGRADE MITIGATE GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, w

FAQ

How do I fix sasl vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is sasl being exploited right now?

None of the tracked sasl CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which sasl CVE should I patch first?

CVE-2026-56968 currently ranks highest (37/100): GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, w.

← Back to latest CVEs