Vulnerability details
CVE-2026-39821
Go standard library net/httpGo standard library net/http/internal/http2Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2Red Hat Compliance OperatorRed Hat Confidential Compute AttestationRed Hat Deployment Validation Operator
Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna
CVSS 3.1
8.2High
Official description
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 9.6Critical | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N |
| 8.2High | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Go standard library | net/http | v < 1.25.13 | CVEProject cvelistV5 (CNA) |
| Go standard library | net/http | 1.26.0-0 ≤ v < 1.26.6 | CVEProject cvelistV5 (CNA) |
| Go standard library | net/http | 1.27.0-0 ≤ v < 1.27.0-rc.3 | CVEProject cvelistV5 (CNA) |
| Go standard library | net/http/internal/http2 | v < 1.25.13 | CVEProject cvelistV5 (CNA) |
| Go standard library | net/http/internal/http2 | 1.26.0-0 ≤ v < 1.26.6 | CVEProject cvelistV5 (CNA) |
| Go standard library | net/http/internal/http2 | 1.27.0-0 ≤ v < 1.27.0-rc.3 | CVEProject cvelistV5 (CNA) |
| Red Hat | Assisted Installer for Red Hat OpenShift Container Platform 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Compliance Operator | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Confidential Compute Attestation | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Confidential Compute Attestation | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Deployment Validation Operator | All | CVEProject cvelistV5 (CNA) |
| Red Hat | External Secrets Operator for Red Hat OpenShift | All | CVEProject cvelistV5 (CNA) |
| Red Hat | ExternalDNS Operator | All | CVEProject cvelistV5 (CNA) |
| Red Hat | ExternalDNS Operator | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Fence Agents Remediation Operator | All | CVEProject cvelistV5 (CNA) |
| Red Hat | File Integrity Operator | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Gatekeeper 3 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Machine Deletion Remediation Operator | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Multiarch Tuning Operator | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Network Observability Operator | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Node HealthCheck Operator | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Node HealthCheck Operator | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Node HealthCheck Operator | All | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift API for Data Protection | All | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Developer Tools and Services | All | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Lightspeed | All | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | All | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | All | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | All | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | All | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | All | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Power monitoring for Red Hat OpenShift | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat 3scale API Management Platform 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ceph Storage 5 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ceph Storage 6 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ceph Storage 8 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ceph Storage 9 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Certification Program for Red Hat Enterprise Linux 9 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Connectivity Link 1 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 7 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 8 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Cluster Manager CLI | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Virtualization 4 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift distributed tracing 3 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift for Windows Containers | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift on AWS | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenStack Platform 17.1 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Satellite 6 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Security Profiles Operator | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview | All | CVEProject cvelistV5 (CNA) |
| golang.org/x/net | golang.org/x/net/idna | v < 0.55.0 | CVEProject cvelistV5 (CNA) |
References and advisories
159- https://access.redhat.com/errata/RHSA-2026:36796 vendor-advisoryx_refsource_REDHAT
- https://go.dev/cl/767220
- https://go.dev/issue/78760
- https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8
- https://groups.google.com/g/golang-announce/c/94pEornpRlI
- https://pkg.go.dev/vuln/GO-2026-5026
- https://access.redhat.com/security/cve/CVE-2026-39821 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2480756 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39821.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:42079 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42080 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41019 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:66350 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54191 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42078 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54757 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54580 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34789 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42082 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57845 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:62549 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65851 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42150 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42151 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42240 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:67149 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:49702 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:67517 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56143 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:59546 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:53413 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:63134 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:53374 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:51187 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:30855 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:46395 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37436 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:35827 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:35826 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65534 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34357 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:66432 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:39005 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:39573 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:38995 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:30853 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:35830 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:35831 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:66016 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41930 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:68504 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:67319 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:61253 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:67160 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65359 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:61245 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60354 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57649 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:67159 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:59549 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:53412 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:59562 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60315 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:67287 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:49712 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:51112 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56223 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:52826 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:53415 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57541 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54401 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:30854 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37435 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:35828 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:35829 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65886 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34359 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65153 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:39879 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54531 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34342 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36808 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34364 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56340 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:47952 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:50843 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41030 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:44622 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:47149 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:53530 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:51033 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:66022 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:43692 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60387 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:30651 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:47737 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26546 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26547 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36207 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42132 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42142 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36651 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40945 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40118 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:33531 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:33524 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:23262 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:23264 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54441 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41928 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:50300 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:43038 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42644 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65126 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60520 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36648 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41036 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36820 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:35994 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:35993 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:33155 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:33160 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:33163 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:33173 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:33183 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54287 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54284 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54286 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54285 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54274 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54283 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:44624 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56431 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37387 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41031 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42146 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:43052 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42796 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41066 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54395 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40262 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:51341 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:51194 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36797 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42043 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42047 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42050 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42051 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42049 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42048 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42852 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54435 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57194 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36105 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36167 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41055 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:47735 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:30650 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36883 vendor-advisoryx_refsource_REDHAT
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-05-22
- Last updated
- 2026-09-17
- State
- Published
- Assigner (CNA)
- Go
Exploit prediction (EPSS)
1.83%
Probability of exploitation in 30 days
79%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-1289Improper Validation of Unsafe Equivalence in Input