PT-2026-2683 · Microsoft · Windows Kerberos+1

Published 2026-01-13 · Updated 2026-05-11 · CVE-2026-20833

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows Kerberos (affected versions not specified)

Description The use of a broken or risky cryptographic algorithm in Windows Kerberos can allow an authorized attacker to disclose information locally. This issue allows attackers to obtain sensitive information and affect the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

BDU:2026-00535

CVE-2026-20833

Affected Products

Windows

Windows Kerberos

References · 25

• https://osv.dev/vulnerability/CVE-2026-20833 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20833 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-20833 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20833 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-20833 · Security Note
• https://bdu.fstec.ru/vul/2026-00535 · Security Note
• https://reddit.com/r/activedirectory/comments/1qk1osu/need_help_understanding_this_article_from · Reddit Post
• https://reddit.com/r/activedirectory/comments/1t29ot0/service_account_vulnerabilities_you_keep_finding · Reddit Post
• https://reddit.com/r/SysAdminBlogs/comments/1rzijab/samba_424_released_stronger_encryption · Reddit Post
• https://reddit.com/r/netapp/comments/1rwasug/kerberos_rc4change_enc_cve202620833 · Reddit Post
• https://reddit.com/r/LinuxTeck/comments/1rz9kli/samba_424_released_stronger_encryption · Reddit Post
• https://reddit.com/r/activedirectory/comments/1rwgqt2/how_to_avoid_impact_of_kerberos_aes_hardening · Reddit Post
• https://twitter.com/4sysops/status/2013672929272254503 · Twitter Post
• https://reddit.com/r/activedirectory/comments/1qnwpix/cve202620833_kerberos_rc4_changes_will_services · Reddit Post
• https://twitter.com/uillo/status/2053826207473422635 · Twitter Post