Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-39828

Опубликовано: 27 мая 2026
Источник: msrc
CVSS3: 6.3
EPSS Низкий

Описание

Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

EPSS

Процентиль: 30%
0.00369
Низкий

6.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.3
ubuntu
3 месяца назад

When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.

CVSS3: 8.8
redhat
3 месяца назад

When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.

CVSS3: 6.3
nvd
3 месяца назад

When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.

CVSS3: 6.3
debian
3 месяца назад

When an SSH server authentication callback returned PartialSuccessErro ...

CVSS3: 6.3
github
около 1 месяца назад

golang.org/x/crypto vulnerable to invoking bypass of certificate restrictions

EPSS

Процентиль: 30%
0.00369
Низкий

6.3 Medium

CVSS3