Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-27140

Опубликовано: 08 апр. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 8.8

Описание

SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass.

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

needed

esm-infra-legacy/xenial

needed

esm-infra/bionic

needed

esm-infra/xenial

ignored

end of ESM support, was needs-triage
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps-legacy/xenial

needed

esm-apps/bionic

needed

esm-apps/jammy

needed

esm-apps/xenial

ignored

end of ESM support, was needs-triage
esm-infra/focal

needed

jammy

needed

noble

DNE

questing

DNE

resolute

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needed

jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/bionic

needed

esm-apps/focal

needed

jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needed

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps-legacy/xenial

needed

esm-apps/bionic

needed

esm-apps/focal

needed

esm-apps/xenial

ignored

end of ESM support, was needs-triage
jammy

needed

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/focal

needed

esm-apps/jammy

needed

jammy

needed

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/focal

needed

esm-apps/jammy

needed

esm-apps/noble

needed

jammy

needed

noble

needed

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/focal

needed

esm-apps/jammy

needed

jammy

needed

noble

needed

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

needed

esm-apps/jammy

needed

esm-apps/noble

needed

esm-apps/resolute

needed

jammy

needed

noble

needed

questing

needed

resolute

needed

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

needed

esm-apps/jammy

needed

esm-apps/noble

needed

jammy

needed

noble

needed

questing

needed

resolute

needed

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

1.25.9-1
jammy

DNE

noble

DNE

questing

needed

resolute

needed

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/xenial

not-affected

code not present
esm-infra/xenial

ignored

end of ESM support, was needs-triage
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/bionic

not-affected

code not present
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/bionic

not-affected

code not present
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

EPSS

Процентиль: 41%
0.00532
Низкий

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 9
redhat
3 месяца назад

SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass.

CVSS3: 8.8
nvd
3 месяца назад

SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass.

msrc
26 дней назад

Code execution vulnerability in SWIG code generation in cmd/go

CVSS3: 8.8
debian
3 месяца назад

SWIG file names containing 'cgo' and well-crafted payloads could lead ...

CVSS3: 8.8
github
3 месяца назад

SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass.

EPSS

Процентиль: 41%
0.00532
Низкий

8.8 High

CVSS3

Уязвимость CVE-2026-27140