Поиск уязвимостей
Количество 46
Количество 46
CVE-2026-39831
The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a "no-touch-required" extension in Permissions.Extensions from PublicKeyCallback.
CVE-2026-39831
The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a "no-touch-required" extension in Permissions.Extensions from PublicKeyCallback.
CVE-2026-39831
The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a "no-touch-required" extension in Permissions.Extensions from PublicKeyCallback.
CVE-2026-39831
Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh
CVE-2026-39831
The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nis ...
ROS-20260709-80-0027
Уязвимость portainer-ce
ROS-20260709-73-0026
Уязвимость portainer-ce
GHSA-89gr-r52h-f8rx
golang.org/x/crypto: FIDO/U2F security key physical presence check can be bypassed
BDU:2026-11948
Уязвимость функции Verify() языка программирования Go, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ROS-20261105-80-0036
Уязвимость alloy
ROS-20260921-80-0140
Уязвимость golang-x-crypto
ROS-20260921-73-0112
Уязвимость golang-x-crypto
ALT-PU-2026-15501
ALT-PU-2026-15501: package `prometheus-podman-exporter` update to version 2.0.0-alt1
openSUSE-SU-2026:20838-1
Security update for hauler
openSUSE-SU-2026:20833-1
Security update for trivy
openSUSE-SU-2026:21069-1
Security update for google-guest-agent
openSUSE-SU-2026:20834-1
Security update for apptainer
openSUSE-SU-2026:21084-1
Security update for distribution
SUSE-SU-2026:2611-1
Security update for google-osconfig-agent
openSUSE-SU-2026:21924-1
Security update for cloudflared
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-39831 The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a "no-touch-required" extension in Permissions.Extensions from PublicKeyCallback. | CVSS3: 9.1 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-39831 The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a "no-touch-required" extension in Permissions.Extensions from PublicKeyCallback. | CVSS3: 8.1 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-39831 The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a "no-touch-required" extension in Permissions.Extensions from PublicKeyCallback. | CVSS3: 9.1 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-39831 Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh | CVSS3: 9.1 | 0% Низкий | 6 месяцев назад |
| CVE-2026-39831 The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nis ... | CVSS3: 9.1 | 0% Низкий | 6 месяцев назад |
 | ROS-20260709-80-0027 Уязвимость portainer-ce | CVSS3: 9.1 | 0% Низкий | 4 месяца назад |
| ROS-20260709-73-0026 Уязвимость portainer-ce | CVSS3: 9.1 | 0% Низкий | 4 месяца назад |
| GHSA-89gr-r52h-f8rx golang.org/x/crypto: FIDO/U2F security key physical presence check can be bypassed | CVSS3: 9.1 | 0% Низкий | 5 месяцев назад |
 | BDU:2026-11948 Уязвимость функции Verify() языка программирования Go, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 9.1 | 0% Низкий | 6 месяцев назад |
| ROS-20261105-80-0036 Уязвимость alloy | CVSS3: 9.1 | 0% Низкий | 4 дня назад |
| ROS-20260921-80-0140 Уязвимость golang-x-crypto | CVSS3: 9.1 | 0% Низкий | около 2 месяцев назад |
| ROS-20260921-73-0112 Уязвимость golang-x-crypto | CVSS3: 9.1 | 0% Низкий | около 2 месяцев назад |
| ALT-PU-2026-15501 ALT-PU-2026-15501: package `prometheus-podman-exporter` update to version 2.0.0-alt1 | CVSS3: 9.1 | около 2 месяцев назад | |
 | openSUSE-SU-2026:20838-1 Security update for hauler | 5 месяцев назад | ||
| openSUSE-SU-2026:20833-1 Security update for trivy | 5 месяцев назад | ||
| openSUSE-SU-2026:21069-1 Security update for google-guest-agent | 5 месяцев назад | ||
| openSUSE-SU-2026:20834-1 Security update for apptainer | 5 месяцев назад | ||
| openSUSE-SU-2026:21084-1 Security update for distribution | 5 месяцев назад | ||
| SUSE-SU-2026:2611-1 Security update for google-osconfig-agent | 5 месяцев назад | ||
| openSUSE-SU-2026:21924-1 Security update for cloudflared | около 2 месяцев назад |
Уязвимостей на страницу