CVE-2026-129116

Name of the Vulnerable Software and Affected Versions C-Kermit versions 7.0.197 through 11.1.514

Description The IKSD SSL build contains an issue where the Telnet authentication state remains at AUTH VALID after a certificate login is refused. This allows an attacker who possesses a trusted certificate mapped to a refused account to authenticate as any other account using any password, thereby gaining shell access to that account.

Recommendations Update C-Kermit to version 11.1.515 or later.