https://poc.intelseclab.com/tags/apache-druid/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/crypto/2026-07-06_cve-2025-59390-druid-kerberos-threadlocalrandom-seed-recovery/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/crypto/2026-07-06_cve-2025-59390-druid-kerberos-threadlocalrandom-seed-recovery/Critical severity (CVSS 9.8) — crypto · CVE-2025-59390. Status: PoC. Affects: Apache Druid — Kerberos authenticator (druid.auth.authenticator.kerberos). Tags: apache-druid, kerberos, threadlocalrandom, prng, seed-recovery, cookie-forgery, authentication-bypass, cwe-338.cryptoCriticalapache-druidkerberosthreadlocalrandomprngseed-recoverycookie-forgeryauthentication-bypasscwe-338