https://vulnerability.circl.lu/sightings/feed 2026-09-17T05:40:01.716577+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/df3b4d1b-031d-425e-97df-c87a1cbc1784/export 2026-09-17T05:40:01.740985+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "df3b4d1b-031d-425e-97df-c87a1cbc1784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39821", "type": "seen", "source": "https://bsky.app/profile/mfahlandt.bsky.social/post/3mvhy7nkiya2l", "content": "\u2699\ufe0f Last Week in Cloud Native (W38) update.\n- K8s v1.37: Native Histograms Beta, In-Place Pod Resize Preemption Alpha.\n- Kyverno v1.19.1 addressed CVE-2026-39821, CVE-2026-56853.\n- Prometheus v3.13.3 addressed GO-2026-5841, GO-2026-6303.\nFull breakdown:\n\nhttps://lwcn.dev/newsletter/2026-week-38/", "creation_timestamp": "2026-09-14T11:14:56.604759Z"} 2026-09-14T11:14:56.604759+00:00 https://vulnerability.circl.lu/sighting/b54764b8-3c5c-45f5-952f-d9dd030953aa/export 2026-09-17T05:40:01.743500+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b54764b8-3c5c-45f5-952f-d9dd030953aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39821", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mv5jxht7og72", "content": "\ud83d\udd04 CSAF advisory updated (version 2.0.0)\n\nVDE-2026-088\nMETTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4\nCVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671, CVE-2026-0915 (+60 more)\n\nChanges: corrected version\n\nHTML [\u2026]", "creation_timestamp": "2026-09-10T07:33:13.275478Z"} 2026-09-10T07:33:13.275478+00:00 https://vulnerability.circl.lu/sighting/f2606820-76a2-492d-8370-469ef0f93524/export 2026-09-17T05:40:01.743645+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f2606820-76a2-492d-8370-469ef0f93524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39821", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117245580792871468", "content": "\ud83d\udd04 CSAF advisory updated (version 2.0.0)\nVDE-2026-088METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671, CVE-2026-0915 (+60 more)\nChanges: corrected version\nHTML: https://certvde.com/en/advisories/VDE-2026-088/CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-088.json\n#OT #Advisory", "creation_timestamp": "2026-09-10T07:33:08.843739Z"} 2026-09-10T07:33:08.843739+00:00 https://vulnerability.circl.lu/sighting/31d26e6b-f13b-462a-a10b-9b2861542520/export 2026-09-17T05:40:01.743750+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "31d26e6b-f13b-462a-a10b-9b2861542520", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39821", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mtoa33rtie2y", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-39821 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/664 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-08-22T12:01:08.361623Z"} 2026-08-22T12:01:08.361623+00:00 https://vulnerability.circl.lu/sighting/d3aeba5d-fb93-4cce-8935-1dbdafa0453f/export 2026-09-17T05:40:01.743849+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d3aeba5d-fb93-4cce-8935-1dbdafa0453f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39821", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mt24darv2j2e", "content": "\n\ud83d\udea8 New HIGH CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-39821 impacts stdlib in 25 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/664\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-08-14T12:00:52.552992Z"} 2026-08-14T12:00:52.552992+00:00 https://vulnerability.circl.lu/sighting/529a18b3-9b4f-4548-8d8c-feae5c12f999/export 2026-09-17T05:40:01.743943+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "529a18b3-9b4f-4548-8d8c-feae5c12f999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39822", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mqh4wxyf6d23", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-39822 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/593 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-07-12T12:00:55.887221Z"} 2026-07-12T12:00:55.887221+00:00 https://vulnerability.circl.lu/sighting/88e5c3d3-0510-41c6-9b56-8df80faee01b/export 2026-09-17T05:40:01.744036+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "88e5c3d3-0510-41c6-9b56-8df80faee01b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39822", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mqgpenvysd2c", "content": "os: Root escape via symlink plus trailing slash (CVE-2026-39822) #golang\n\n\n github.com -> \n\n\nOriginal->", "creation_timestamp": "2026-07-12T07:58:03.213972Z"} 2026-07-12T07:58:03.213972+00:00 https://vulnerability.circl.lu/sighting/9b477023-4657-47d3-88be-96fcf6dc07ac/export 2026-09-17T05:40:01.744156+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9b477023-4657-47d3-88be-96fcf6dc07ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39822", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mq7lk7amnk2g", "content": "\n\ud83d\udea8 New UNKNOWN CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-39822 impacts stdlib in 26 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/593\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-07-09T12:00:55.503996Z"} 2026-07-09T12:00:55.503996+00:00 https://vulnerability.circl.lu/sighting/0daf6e13-4014-48b8-931f-cd39f45cb97d/export 2026-09-17T05:40:01.744252+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0daf6e13-4014-48b8-931f-cd39f45cb97d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39822", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mq5mx4lmyo2y", "content": "Go 1.26.5 and Go 1.25.12 fix CVE-2026-39822 & CVE-2026-42505", "creation_timestamp": "2026-07-08T17:20:43.593751Z"} 2026-07-08T17:20:43.593751+00:00 https://vulnerability.circl.lu/sighting/35d5c060-e06d-4fca-9084-7e4f67d32555/export 2026-09-17T05:40:01.744343+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "35d5c060-e06d-4fca-9084-7e4f67d32555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39828", "type": "seen", "source": "https://gist.github.com/alon710/1194db939e0c9dba565e620e2d426ad0", "content": "# CVE-2026-39828: CVE-2026-39828: Go SSH Server PartialSuccessError Permissions Discard Bypass\n\n> **CVSS Score:** 6.3\n> **Published:** 2026-06-25\n> **Full Report:** https://cvereports.com/reports/CVE-2026-39828\n\n## Summary\nA critical security bypass vulnerability was discovered in the Go SSH server implementation within the golang.org/x/crypto/ssh package. When an SSH server authentication callback returned a PartialSuccessError alongside non-nil Permissions, the server silently discarded these permissions before the subsequent authentication step. Consequently, once the user completed the second-factor authentication, the session-level restrictions were dropped, granting the client unauthorized capabilities.\n\n## TL;DR\nA session state vulnerability in Go's SSH server package allows clients to bypass certificate restrictions (such as forced commands or client source IP bounds) during multi-factor authentication, resulting in unauthorized unrestricted access.\n\n## Technical Details\n\n- **CWE ID**: CWE-863 (Primary), CWE-295\n- **Attack Vector**: Network\n- **CVSS v3.1**: 6.3\n- **EPSS Score**: 0.00175 (7.12% percentile)\n- **Impact**: Authorization Bypass / Privilege Escalation\n- **Exploit Status**: None (No active public exploits)\n- **KEV Status**: Not listed\n\n## Affected Systems\n\n- Custom SSH servers built with golang.org/x/crypto/ssh\n- Go-based SSH portals and jump servers\n- Go-based bastion hosts and network gateway controls\n- **golang.org/x/crypto**: < v0.52.0 (Fixed in: `v0.52.0`)\n\n## Mitigation\n\n- Upgrade golang.org/x/crypto module to version v0.52.0 or newer\n- Modify custom SSH server authentication callbacks to return nil permissions with PartialSuccessError\n- Enforce intermediate verification checks in custom Go SSH connection loops\n\n**Remediation Steps:**\n1. Run 'go get golang.org/x/crypto@v0.52.0' in the project directory\n2. Execute 'go mod tidy' to update go.sum and dependencies\n3. Verify that the project compiles and run existing SSH unit tests\n4. Review custom 'VerifiedPublicKeyCallback' or 'PublicKeyCallback' structures in custom SSH servers to ensure they return nil permissions during partial success\n5. Deploy the rebuilt SSH server binary to staging and production environments\n\n## References\n\n- [Go Issue Tracker Thread #79562](https://go.dev/issue/79562)\n- [Gerrit Code Review / Code Patch](https://go.dev/cl/781621)\n- [Go Vulnerability Advisory GO-2026-5014](https://pkg.go.dev/vuln/GO-2026-5014)\n- [Golang Announce Mailing List](https://groups.google.com/g/golang-announce/c/a082jnz-LvI)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-39828) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-26T09:53:04.010867Z"} 2026-06-26T09:53:04.010867+00:00