En resumen
- CVE-2026-39828 es una vulnerabilidad MEDIO (CVSS 6.3) que afecta a golang.org/x/crypto, crypto (golang).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.37%, mayor que el 30.8% de las vulnerabilidades.
- Solución: actualizar a 0.52.0 o posterior.
Description
When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.
NVD description
When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.
Más vulnerabilidades de golang.org/x/crypto
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free