Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-39828

Опубликовано: 27 мая 2026
Источник: msrc
CVSS3: 6.3
EPSS Низкий

Описание

Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

EPSS

Процентиль: 31%
0.00369
Низкий

6.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
6 месяцев назад

When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.

CVSS3: 8.8
redhat
6 месяцев назад

When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.

CVSS3: 8.8
nvd
6 месяцев назад

When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.

CVSS3: 8.8
debian
6 месяцев назад

When an SSH server authentication callback returned PartialSuccessErro ...

CVSS3: 8.8
redos
около 2 месяцев назад

Уязвимость golang-x-crypto

EPSS

Процентиль: 31%
0.00369
Низкий

6.3 Medium

CVSS3