dun vulnerabilities

Products

• munge 1

Latest dun CVEs

Newest publication first

1. CVE-2026-25506 MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery

   Published 2026-02-10

   High·CVSS 7.8 EPSS 0.34%

   MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulnerability in munged (the MUNGE authentication daemon) to leak cryptographic key material from process memory. With the leaked key...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.