Latchset vulnerabilities
We track 1 vulnerability in Latchset products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 12, 2025.
1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score
Latest Latchset vulnerabilities
- 8.6 High severity
kdcproxy: Server-Side Request Forgery
If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query SRV records in the DNS zone matching the requested realm name. This creates a server-side request forgery vulnerability, sin