Golang
CVE-2026-25679
HIGH
Direct Request ('Forced Browsing') (CWE-425)
2026-03-06
security@golang.org
7.5
CVSS 3.1 · Vendor: golang
View
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessIdentify Go application parsing external URLs
-
DeliveryCraft URL with invalid host/authority
-
ExploitSubmit malformed URL via HTTP request
-
ExecutionTrigger url.Parse processing
-
PersistConsume excessive resources
-
ImpactApplication becomes unresponsive
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Direct request prevention
|
| Exploitation Conditions | Remote unauthenticated exploitation against default configurations of Go applications that invoke url.Parse on untrusted input. Any Go program using the net/url package to parse URLs from external sources (HTTP parameters, API requests, configuration files, webhooks, user-provided redirect targets) is vulnerable without code-level input validation. Exploitation does NOT require special Go build configurations, non-default package settings, or specific deployment environments. The vulnerability is in core standard library parsing logic. Limiting factor: impact is denial-of-service only, making this less attractive to attackers seeking data exfiltration or system compromise. |
| Impact | CVSS 7.5 (High) reflects network-accessible, low-complexity exploitation requiring no authentication or user interaction, with high availability impact (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). However, real-world risk is moderate: EPSS 0.07% (22nd percentile) indicates very low predicted exploitation probability, and no CISA KEV listing confirms this is not being actively exploited in the wild. The attack is purely denial-of-service with no confidentiality or integrity impact, limiting its utility for attackers compared to RCE vulnerabilities. SSVC framework consideration: exploitation status is none (public POC unknown), automatable is yes (simple malformed URL injection), technical impact is partial (availability only). The wide deployment of Go applications elevates risk through exposure surface, but the availability-only impact and low EPSS score suggest this is not a critical priority unless specific applications are mission-critical and face untrusted URL inputs. Multiple vendor patches from Red Hat indicate enterprise environments are taking action. This is a patch-and-move-on issue rather than an emergency. |
| Exploit ScenarioDerived | An attacker sends crafted HTTP requests to a Go web service that parses URLs from user input, such as a redirect parameter, webhook URL, or proxy target. The malicious request contains a URL with an invalid host/authority component that passes initial sanity checks but triggers a parsing failure or infinite loop in url.Parse. The vulnerable Go application consumes excessive CPU or memory processing the malformed URL, becomes unresponsive, and denies service to legitimate users. Repeated requests amplify the impact to complete service outage. |
This Week
Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).
Patch available
0.1% exploitation probability (EPSS)
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv2 – Apr 21, 2026
Denial of service in Go's net/url package allows remote unauthenticated attackers to crash applications via malformed URLs with invalid host/authority components. The url.Parse function fails to properly validate authority sections, enabling resource exhaustion attacks against any Go application parsing untrusted URLs. EPSS score of 0.07% (22nd percentile) suggests low probability of widespread exploitation despite the network attack vector. Vendor patch available with multiple Red Hat security advisories issued.
Earlier versions of this analysis (1)
v1
Mar 12, 2026 - 22:06
CVSS 7.5
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. [CVSS 7.5 HIGH]
RemediationAI
Apply the vendor-released patch available from the Go project at https://go.dev/cl/752180, upgrading to the patched Go version specified in the official announcement at https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk. Red Hat Enterprise Linux users should apply the relevant RHSA advisory for their specific product version from https://access.redhat.com/errata/. For applications that cannot immediately upgrade, implement input validation to reject URLs with malformed host/authority components before passing them to url.Parse; use allowlists of expected URL patterns and enforce strict hostname validation (alphanumeric, hyphens, dots only for DNS names). Rate limiting on URL parsing endpoints can mitigate DoS impact but does not eliminate the vulnerability. As a temporary defense-in-depth measure, deploy application-layer firewalls or API gateways that validate URL syntax before traffic reaches vulnerable applications, though this adds latency and complexity. No workaround fully substitutes for patching.
Affected Packages
go
stdlib
fix: 1.25.8, 1.26.1
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in go
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
This vulnerability affects Go's net/url package, specifically the url.Parse function responsible for parsing and validating URL strings per RFC 3986. The affected component is cpe:2.3:a:golang:go across multiple versions including 1.26.0. The root cause is CWE-425 (Direct Request/Forced Browsing), indicating insufficient validation of URL components. The host/authority section of a URL contains the domain name or IP address and optional port; improper validation here means malformed authority strings can bypass security checks or cause parsing errors. Go's url.Parse is foundational to HTTP clients, servers, and any application handling external URLs, making this a supply-chain risk affecting the entire Go ecosystem. The vulnerability exists in the parsing logic that processes the authority component between '//' and the first '/' or '?' in a URL.
Know when Golang gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
Vendor (golang)
PRIMARY
7.5
HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
SUSE
HIGH
Red Hat
7.5
HIGH
Primary rating from Vendor (golang).
CVSS VectorVendor: golang
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Lifecycle Timeline
3
Analysis Updated
Apr 21, 2026 - 15:01 vuln.today
v2 - CVSS changed
Patch released
Mar 31, 2026 - 21:13 nvd
Patch available
CVE Published
Mar 06, 2026 - 22:16 nvd
HIGH 7.5
DescriptionCVE.org
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
Executive ViewAI
Why It Matters
CVE-2026-25679 affects Go's URL parsing functionality, allowing remote attackers to crash applications through malformed URLs without authentication. Organizations running Go-based services exposed to untrusted URL input face service availability risk; however, the 0.1% EPSS score indicates low current exploitation probability, providing a measured remediation window.
Business Impact:
Medium
Compensating Controls
Apply vendor patch. Interim mitigations pending patch deployment: implement input validation to reject malformed URLs before parsing, rate-limit URL processing endpoints, and deploy web application firewalls configured to filter requests with invalid authority components.
Threat Intelligence Overview
EPSS Score
0.1%
Top 78% exploitable
Exploit
POC
Public exploit code exists
NVD
CVE.org
EPSS
GitHub
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
SignalValue
Severity
HIGH
CISA KEV
No
Public POC
Yes
EPSS
0.1%
Patch available
Yes
Active threat
No
Deciding rule
HIGH severity (CVSS 7.0-8.9)
What every action level means
Emergency
Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now
Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week
Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month
Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor
Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.
SSVC AssessmentENISA
SSVC Decision· derived
Scheduled
Exploitation· derived
Poc
System Exposure· derived
Open
Automatable· derived
Yes
Human Impact
Medium
Priority Score
58
Low
Medium
High
Critical
KEV: 0
EPSS: 0
CVSS: +38
PoC: +20
Weaponized: 0
Threat intel: 0
Gov advisory: 0
Attack Technique
Information Disclosure
MEDIUM
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
Affected Products (CPE)CVE.org
cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*
cpe:2.3:a:golang:go:1.26.0:*:*:*:*:*:*:*
CVE-2023-44487
HIGH
POC
7.5
Oct 10
Denial of service against HTTP/2 server implementations allows remote unauthenticated attackers to exhaust server resour
CVE-2023-48795
MEDIUM
POC
5.9
Dec 18
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remot
CVE-2016-5386
HIGH
8.1
Jul 19
The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and there
CVE-2026-24897
CRITICAL
POC
10.0
Jan 28
Erugo file-sharing platform up to version 0.2.14 has a CVSS 10.0 path traversal allowing authenticated users to read any
CVE-2025-68121
CRITICAL
POC
10.0
Feb 05
Critical certificate validation bypass in Go crypto/tls during session resumption. If ClientCAs or RootCAs fields are mu
CVE-2022-50926
CRITICAL
POC
9.8
Jan 13
WAGO PFC200 G2 PLC (firmware affected) allows privilege escalation through cookie manipulation. Users can modify cookie
CVE-2026-28408
CRITICAL
POC
9.8
Feb 27
Authentication bypass in WeGIA charitable institution management system before 3.6.5. The adicionar_tipo_docs_atendido.p
CVE-2026-24895
CRITICAL
POC
9.8
Feb 12
CGI path splitting vulnerability in FrankenPHP before 1.11.2 — Unicode characters bypass path validation during CGI proc
CVE-2019-14809
CRITICAL
POC
9.8
Aug 13
net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an authorization by
CVE-2025-66719
CRITICAL
POC
9.1
Jan 23
Free5gc NRF 1.4.0 has an authorization bypass in access token generation that allows authenticated users to request toke
CVE-2022-50909
HIGH
POC
8.8
Jan 13
Algo 8028 Control Panel version 3.3.3 contains a command injection vulnerability in the fm-data.lua endpoint that allows
CVE-2026-82410
HIGH
POC
8.7
Sep 16
Denial of service in PocketBase versions prior to 0.22.48 (0.22.x branch) and 0.23.0 through 0.39.6 (0.23.0+ branch) all
Same weakness CWE-425 – Direct Request ('Forced Browsing')
View allSame technique Information Disclosure
View allVendor StatusVendor
SUSE
Severity: High| Product | Status |
|---|---|
| Container suse/sl-micro/6.0/baremetal-os-container:latest | Affected |
| Container suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.44 Image SL-Micro-Azure Image SL-Micro-BYOS-Azure Image SL-Micro-BYOS-EC2 Image SL-Micro-BYOS-GCE Image SL-Micro-EC2 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE Image SUSE-Multi-Linux-Manager-Server-Azure-llc Image SUSE-Multi-Linux-Manager-Server-Azure-ltd Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE Image SUSE-Multi-Linux-Manager-Server-EC2-llc Image SUSE-Multi-Linux-Manager-Server-EC2-ltd | Affected |
| SUSE Liberty Linux 8 | Fixed |
| SUSE Liberty Linux 9 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Server 15 SP7 SUSE Linux Enterprise Server for SAP Applications 15 SP7 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP4-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP5-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP6-LTSS | Fixed |
| SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server for SAP applications 16.0 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | Fixed |
| openSUSE Leap 15.6 | Fixed |
| openSUSE Leap 16.0 | Fixed |
| openSUSE Tumbleweed | Fixed |
| SUSE Linux Enterprise Server 16.0 | Affected |
| SUSE Linux Enterprise Desktop 15 SP7 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP7 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP7 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP7 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP7 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP7 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP7 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP7 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP7 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP7 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP7 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP7 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP7 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP7 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP7 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP7 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP7 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP7 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | Fixed |
| SUSE Linux Enterprise Server 15 SP7 | Fixed |
| SUSE Linux Enterprise Server 15 SP7 | Fixed |
| SUSE Linux Enterprise Server 15 SP7 | Fixed |
| SUSE Linux Enterprise Server 15 SP7 | Fixed |
| SUSE Linux Enterprise Server 15 SP7 | Fixed |
| SUSE Linux Enterprise Server 15 SP7 | Fixed |
| SUSE Linux Enterprise Server 15 SP7 | Fixed |
| SUSE Linux Enterprise Server 15 SP7 | Fixed |
| SUSE Linux Enterprise Server 15 SP7 | Fixed |
| SUSE Linux Enterprise Server 16.0 | Fixed |
| SUSE Linux Enterprise Server 16.0 | Fixed |
| SUSE Linux Enterprise Server 16.0 | Fixed |
| SUSE Linux Enterprise Server 16.0 | Fixed |
| SUSE Linux Enterprise Server 16.0 | Fixed |
| SUSE Linux Enterprise Server 16.1 | Fixed |
| SUSE Linux Enterprise Server 16.1 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP7 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP7 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP7 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP7 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP7 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP7 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP7 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP7 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP7 | Fixed |
| SUSE Linux Enterprise Server for SAP applications 16.0 | Fixed |
| SUSE Linux Enterprise Server for SAP applications 16.0 | Fixed |
| SUSE Linux Enterprise Server for SAP applications 16.0 | Fixed |
| SUSE Linux Enterprise Server for SAP applications 16.0 | Fixed |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Fixed |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Fixed |
| openSUSE Leap 15.6 | Fixed |
| openSUSE Leap 15.6 | Fixed |
| openSUSE Leap 15.6 | Fixed |
| openSUSE Leap 15.6 | Fixed |
| openSUSE Leap 15.6 | Fixed |
| openSUSE Leap 15.6 | Fixed |
| openSUSE Leap 15.6 | Fixed |
| openSUSE Leap 15.6 | Fixed |
| openSUSE Leap 15.6 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP4 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP4 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP5 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP5 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP5 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP6 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP6 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP6 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP6 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP6 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP6 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP6 | Fixed |
| SUSE Linux Enterprise Server 15 SP4 | Fixed |
| SUSE Linux Enterprise Server 15 SP4-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP4-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP4-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP4-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP4-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP4-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP4-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP4-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP4-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP5 | Fixed |
| SUSE Linux Enterprise Server 15 SP5 | Fixed |
| SUSE Linux Enterprise Server 15 SP5 | Fixed |
| SUSE Linux Enterprise Server 15 SP5-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP5-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP5-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP5-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP5-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP5-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP5-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP5-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP5-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP6 | Fixed |
| SUSE Linux Enterprise Server 15 SP6 | Fixed |
| SUSE Linux Enterprise Server 15 SP6 | Fixed |
| SUSE Linux Enterprise Server 15 SP6 | Fixed |
| SUSE Linux Enterprise Server 15 SP6 | Fixed |
| SUSE Linux Enterprise Server 15 SP6 | Fixed |
| SUSE Linux Enterprise Server 15 SP6 | Fixed |
| SUSE Linux Enterprise Server 15 SP6-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP6-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP6-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP6-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP6-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP6-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP6-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP6-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP6-LTSS | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | Fixed |
| SUSE Manager Proxy 4.3 | Fixed |
| SUSE Manager Retail Branch Server 4.3 | Fixed |
| SUSE Manager Server 4.3 | Fixed |
| SUSE Enterprise Storage 7.1 | Fixed |
| SUSE Enterprise Storage 7.1 | Fixed |
| SUSE Enterprise Storage 7.1 | Fixed |
| SUSE Enterprise Storage 7.1 | Fixed |
| SUSE Enterprise Storage 7.1 | Fixed |
| SUSE Enterprise Storage 7.1 | Fixed |
| SUSE Enterprise Storage 7.1 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP3 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP4 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP5 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP5 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP5 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP6 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP6 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP6 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP6 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP6 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP6 | Fixed |
| SUSE Linux Enterprise Desktop 15 SP6 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP3 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP6 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP6 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP6 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP6 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP6 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP6 | Fixed |
| SUSE Linux Enterprise High Performance Computing 15 SP6 | Fixed |
| SUSE Linux Enterprise Module for Development Tools 15 SP3 | Fixed |
| SUSE Linux Enterprise Module for Package Hub 15 SP5 | Fixed |
| SUSE Linux Enterprise Module for Package Hub 15 SP6 | Fixed |
| SUSE Linux Enterprise Real Time 15 SP3 | Fixed |
| SUSE Linux Enterprise Real Time 15 SP4 | Fixed |
| SUSE Linux Enterprise Server 15 SP3 | Fixed |
| SUSE Linux Enterprise Server 15 SP3-BCL | Fixed |
| SUSE Linux Enterprise Server 15 SP3-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP3-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP3-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP3-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP3-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP3-LTSS | Fixed |
| SUSE Linux Enterprise Server 15 SP3-LTSS | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | Fixed |
| SUSE Manager Proxy 4.2 | Fixed |
| SUSE Manager Retail Branch Server 4.2 | Fixed |
| SUSE Manager Server 4.2 | Fixed |
| openSUSE Leap 15.3 | Fixed |
| openSUSE Leap 15.4 | Fixed |
| openSUSE Leap 15.5 | Fixed |
| openSUSE Leap 15.5 | Fixed |
| openSUSE Leap 15.5 | Fixed |
| openSUSE Leap 15.5 | Fixed |
References
Advisories & patches
ADVISORY
https://access.redhat.com/errata/RHSA-2026:5110
ADVISORY
https://access.redhat.com/errata/RHSA-2026:5549
ADVISORY
https://access.redhat.com/errata/RHSA-2026:5941
ADVISORY
https://access.redhat.com/errata/RHSA-2026:5942
ADVISORY
https://access.redhat.com/errata/RHSA-2026:5943
ADVISORY
https://access.redhat.com/errata/RHSA-2026:5944
ADVISORY
https://access.redhat.com/errata/RHSA-2026:6341
ADVISORY
https://access.redhat.com/errata/RHSA-2026:6344
ADVISORY
https://access.redhat.com/errata/RHSA-2026:6382
ADVISORY
https://access.redhat.com/errata/RHSA-2026:6383
ADVISORY
https://access.redhat.com/errata/RHSA-2026:6388
ADVISORY
https://access.redhat.com/errata/RHSA-2026:6564
ADVISORY
https://access.redhat.com/errata/RHSA-2026:6720
ADVISORY
https://access.redhat.com/errata/RHSA-2026:6802
ADVISORY
https://access.redhat.com/errata/RHSA-2026:6949
ADVISORY
https://access.redhat.com/errata/RHSA-2026:7005
ADVISORY
https://access.redhat.com/errata/RHSA-2026:7009
ADVISORY
https://access.redhat.com/errata/RHSA-2026:7011
ADVISORY
https://access.redhat.com/errata/RHSA-2026:7259
ADVISORY
https://access.redhat.com/errata/RHSA-2026:7315
ADVISORY
https://access.redhat.com/errata/RHSA-2026:7328
ADVISORY
https://vuldb.com/vuln/349616
ADVISORY
https://www.suse.com/support/update/SUSE-SU-2026:0875/
ADVISORY
https://www.suse.com/support/update/SUSE-SU-2026:0876/
ADVISORY
https://www.suse.com/support/update/SUSE-SU-2026:0947/
ADVISORY
https://www.suse.com/support/update/SUSE-SU-2026:0976/
ADVISORY
https://www.suse.com/support/update/SUSE-SU-2026:0977/
ADVISORY
https://www.suse.com/support/update/SUSE-SU-2026:0993/
ADVISORY
https://www.suse.com/support/update/SUSE-SU-2026:1042/
REF
https://access.redhat.com/errata/RHSA-2026:10065
REF
https://access.redhat.com/errata/RHSA-2026:10125
REF
https://access.redhat.com/errata/RHSA-2026:10133
REF
https://access.redhat.com/errata/RHSA-2026:10140
REF
https://access.redhat.com/errata/RHSA-2026:10141
REF
https://access.redhat.com/errata/RHSA-2026:10158
REF
https://access.redhat.com/errata/RHSA-2026:10169
REF
https://access.redhat.com/errata/RHSA-2026:10175
REF
https://access.redhat.com/errata/RHSA-2026:10184
REF
https://access.redhat.com/errata/RHSA-2026:10225
REF
https://access.redhat.com/errata/RHSA-2026:10250
REF
https://access.redhat.com/errata/RHSA-2026:10701
REF
https://access.redhat.com/errata/RHSA-2026:10712
REF
https://access.redhat.com/errata/RHSA-2026:10929
REF
https://access.redhat.com/errata/RHSA-2026:11217
REF
https://access.redhat.com/errata/RHSA-2026:11375
REF
https://access.redhat.com/errata/RHSA-2026:11412
REF
https://access.redhat.com/errata/RHSA-2026:11413
REF
https://access.redhat.com/errata/RHSA-2026:11686
REF
https://access.redhat.com/errata/RHSA-2026:11688
REF
https://access.redhat.com/errata/RHSA-2026:11747
REF
https://access.redhat.com/errata/RHSA-2026:11749
REF
https://access.redhat.com/errata/RHSA-2026:11768
REF
https://access.redhat.com/errata/RHSA-2026:11800
REF
https://access.redhat.com/errata/RHSA-2026:11856
REF
https://access.redhat.com/errata/RHSA-2026:11916
REF
https://access.redhat.com/errata/RHSA-2026:11996
REF
https://access.redhat.com/errata/RHSA-2026:12028
REF
https://access.redhat.com/errata/RHSA-2026:12029
REF
https://access.redhat.com/errata/RHSA-2026:12030
REF
https://access.redhat.com/errata/RHSA-2026:12031
REF
https://access.redhat.com/errata/RHSA-2026:12032
REF
https://access.redhat.com/errata/RHSA-2026:12033
REF
https://access.redhat.com/errata/RHSA-2026:12282
REF
https://access.redhat.com/errata/RHSA-2026:13508
REF
https://access.redhat.com/errata/RHSA-2026:13512
REF
https://access.redhat.com/errata/RHSA-2026:13545
REF
https://access.redhat.com/errata/RHSA-2026:13642
REF
https://access.redhat.com/errata/RHSA-2026:13643
REF
https://access.redhat.com/errata/RHSA-2026:13671
REF
https://access.redhat.com/errata/RHSA-2026:13791
REF
https://access.redhat.com/errata/RHSA-2026:13829
REF
https://access.redhat.com/errata/RHSA-2026:14020
REF
https://access.redhat.com/errata/RHSA-2026:14100
REF
https://access.redhat.com/errata/RHSA-2026:14774
REF
https://access.redhat.com/errata/RHSA-2026:14868
REF
https://access.redhat.com/errata/RHSA-2026:14879
REF
https://access.redhat.com/errata/RHSA-2026:15091
REF
https://access.redhat.com/errata/RHSA-2026:16102
REF
https://access.redhat.com/errata/RHSA-2026:16696
REF
https://access.redhat.com/errata/RHSA-2026:16874
REF
https://access.redhat.com/errata/RHSA-2026:16875
REF
https://access.redhat.com/errata/RHSA-2026:17040
REF
https://access.redhat.com/errata/RHSA-2026:17084
REF
https://access.redhat.com/errata/RHSA-2026:17287
REF
https://access.redhat.com/errata/RHSA-2026:17598
REF
https://access.redhat.com/errata/RHSA-2026:19017
REF
https://access.redhat.com/errata/RHSA-2026:19022
REF
https://access.redhat.com/errata/RHSA-2026:19026
REF
https://access.redhat.com/errata/RHSA-2026:19027
REF
https://access.redhat.com/errata/RHSA-2026:19031
REF
https://access.redhat.com/errata/RHSA-2026:19032
REF
https://access.redhat.com/errata/RHSA-2026:19049
REF
https://access.redhat.com/errata/RHSA-2026:19055
REF
https://access.redhat.com/errata/RHSA-2026:19126
REF
https://access.redhat.com/errata/RHSA-2026:19128
REF
https://access.redhat.com/errata/RHSA-2026:19132
REF
https://access.redhat.com/errata/RHSA-2026:19133
REF
https://access.redhat.com/errata/RHSA-2026:19135
REF
https://access.redhat.com/errata/RHSA-2026:19181
REF
https://access.redhat.com/errata/RHSA-2026:19184
REF
https://access.redhat.com/errata/RHSA-2026:19185
REF
https://access.redhat.com/errata/RHSA-2026:19207
REF
https://access.redhat.com/errata/RHSA-2026:19350
REF
https://access.redhat.com/errata/RHSA-2026:19353
REF
https://access.redhat.com/errata/RHSA-2026:19375
REF
https://access.redhat.com/errata/RHSA-2026:19475
REF
https://access.redhat.com/errata/RHSA-2026:19634
REF
https://access.redhat.com/errata/RHSA-2026:19719
REF
https://access.redhat.com/errata/RHSA-2026:19720
REF
https://access.redhat.com/errata/RHSA-2026:19721
REF
https://access.redhat.com/errata/RHSA-2026:19750
REF
https://access.redhat.com/errata/RHSA-2026:20041
REF
https://access.redhat.com/errata/RHSA-2026:20088
REF
https://access.redhat.com/errata/RHSA-2026:20581
REF
https://access.redhat.com/errata/RHSA-2026:20582
REF
https://access.redhat.com/errata/RHSA-2026:20584
REF
https://access.redhat.com/errata/RHSA-2026:20889
REF
https://access.redhat.com/errata/RHSA-2026:21017
REF
https://access.redhat.com/errata/RHSA-2026:21655
REF
https://access.redhat.com/errata/RHSA-2026:21657
REF
https://access.redhat.com/errata/RHSA-2026:21691
REF
https://access.redhat.com/errata/RHSA-2026:21696
REF
https://access.redhat.com/errata/RHSA-2026:21769
REF
https://access.redhat.com/errata/RHSA-2026:22347
REF
https://access.redhat.com/errata/RHSA-2026:22423
REF
https://access.redhat.com/errata/RHSA-2026:22450
REF
https://access.redhat.com/errata/RHSA-2026:22627
REF
https://access.redhat.com/errata/RHSA-2026:22714
REF
https://access.redhat.com/errata/RHSA-2026:22733
REF
https://access.redhat.com/errata/RHSA-2026:22862
REF
https://access.redhat.com/errata/RHSA-2026:22937
REF
https://access.redhat.com/errata/RHSA-2026:23228
REF
https://access.redhat.com/errata/RHSA-2026:23345
REF
https://access.redhat.com/errata/RHSA-2026:24386
REF
https://access.redhat.com/errata/RHSA-2026:24853
REF
https://access.redhat.com/errata/RHSA-2026:25043
REF
https://access.redhat.com/errata/RHSA-2026:25127
REF
https://access.redhat.com/errata/RHSA-2026:25180
REF
https://access.redhat.com/errata/RHSA-2026:25248
REF
https://access.redhat.com/errata/RHSA-2026:25250
REF
https://access.redhat.com/errata/RHSA-2026:25251
REF
https://access.redhat.com/errata/RHSA-2026:25252
REF
https://access.redhat.com/errata/RHSA-2026:25253
REF
https://access.redhat.com/errata/RHSA-2026:26445
REF
https://access.redhat.com/errata/RHSA-2026:26527
REF
https://access.redhat.com/errata/RHSA-2026:26541
REF
https://access.redhat.com/errata/RHSA-2026:26568
REF
https://access.redhat.com/errata/RHSA-2026:26585
REF
https://access.redhat.com/errata/RHSA-2026:26636
REF
https://access.redhat.com/errata/RHSA-2026:27076
REF
https://access.redhat.com/errata/RHSA-2026:28047
REF
https://access.redhat.com/errata/RHSA-2026:28441
REF
https://access.redhat.com/errata/RHSA-2026:28886
REF
https://access.redhat.com/errata/RHSA-2026:28893
REF
https://access.redhat.com/errata/RHSA-2026:28961
REF
https://access.redhat.com/errata/RHSA-2026:29035
REF
https://access.redhat.com/errata/RHSA-2026:29195
REF
https://access.redhat.com/errata/RHSA-2026:29455
REF
https://access.redhat.com/errata/RHSA-2026:29702
REF
https://access.redhat.com/errata/RHSA-2026:29703
REF
https://access.redhat.com/errata/RHSA-2026:29854
REF
https://access.redhat.com/errata/RHSA-2026:33722
REF
https://access.redhat.com/errata/RHSA-2026:34097
REF
https://access.redhat.com/errata/RHSA-2026:34365
REF
https://access.redhat.com/errata/RHSA-2026:36317
REF
https://access.redhat.com/errata/RHSA-2026:36319
REF
https://access.redhat.com/errata/RHSA-2026:36651
REF
https://access.redhat.com/errata/RHSA-2026:36796
REF
https://access.redhat.com/errata/RHSA-2026:39810
REF
https://access.redhat.com/errata/RHSA-2026:40118
REF
https://access.redhat.com/errata/RHSA-2026:40945
REF
https://access.redhat.com/errata/RHSA-2026:41019
REF
https://access.redhat.com/errata/RHSA-2026:41928
REF
https://access.redhat.com/errata/RHSA-2026:42150
REF
https://access.redhat.com/errata/RHSA-2026:42151
REF
https://access.redhat.com/errata/RHSA-2026:48036
REF
https://access.redhat.com/errata/RHSA-2026:49944
REF
https://access.redhat.com/errata/RHSA-2026:51288
REF
https://access.redhat.com/errata/RHSA-2026:52389
REF
https://access.redhat.com/errata/RHSA-2026:52390
REF
https://access.redhat.com/errata/RHSA-2026:52391
REF
https://access.redhat.com/errata/RHSA-2026:54191
REF
https://access.redhat.com/errata/RHSA-2026:54757
REF
https://access.redhat.com/errata/RHSA-2026:56785
REF
https://access.redhat.com/errata/RHSA-2026:56852
REF
https://access.redhat.com/errata/RHSA-2026:56910
REF
https://access.redhat.com/errata/RHSA-2026:57482
REF
https://access.redhat.com/errata/RHSA-2026:59830
REF
https://access.redhat.com/errata/RHSA-2026:60018
REF
https://access.redhat.com/errata/RHSA-2026:65838
REF
https://access.redhat.com/errata/RHSA-2026:66401
REF
https://access.redhat.com/errata/RHSA-2026:7291
REF
https://access.redhat.com/errata/RHSA-2026:7385
REF
https://access.redhat.com/errata/RHSA-2026:7665
REF
https://access.redhat.com/errata/RHSA-2026:7669
REF
https://access.redhat.com/errata/RHSA-2026:7674
REF
https://access.redhat.com/errata/RHSA-2026:7833
REF
https://access.redhat.com/errata/RHSA-2026:7834
REF
https://access.redhat.com/errata/RHSA-2026:7876
REF
https://access.redhat.com/errata/RHSA-2026:7877
REF
https://access.redhat.com/errata/RHSA-2026:7878
REF
https://access.redhat.com/errata/RHSA-2026:7879
REF
https://access.redhat.com/errata/RHSA-2026:7883
REF
https://access.redhat.com/errata/RHSA-2026:7992
REF
https://access.redhat.com/errata/RHSA-2026:8151
REF
https://access.redhat.com/errata/RHSA-2026:8167
REF
https://access.redhat.com/errata/RHSA-2026:8314
REF
https://access.redhat.com/errata/RHSA-2026:8322
REF
https://access.redhat.com/errata/RHSA-2026:8324
REF
https://access.redhat.com/errata/RHSA-2026:8337
REF
https://access.redhat.com/errata/RHSA-2026:8338
REF
https://access.redhat.com/errata/RHSA-2026:8433
REF
https://access.redhat.com/errata/RHSA-2026:8434
REF
https://access.redhat.com/errata/RHSA-2026:8456
REF
https://access.redhat.com/errata/RHSA-2026:8483
REF
https://access.redhat.com/errata/RHSA-2026:8484
REF
https://access.redhat.com/errata/RHSA-2026:8490
REF
https://access.redhat.com/errata/RHSA-2026:8491
REF
https://access.redhat.com/errata/RHSA-2026:8493
REF
https://access.redhat.com/errata/RHSA-2026:8840
REF
https://access.redhat.com/errata/RHSA-2026:8841
REF
https://access.redhat.com/errata/RHSA-2026:8842
REF
https://access.redhat.com/errata/RHSA-2026:8845
REF
https://access.redhat.com/errata/RHSA-2026:8847
REF
https://access.redhat.com/errata/RHSA-2026:8848
REF
https://access.redhat.com/errata/RHSA-2026:8849
REF
https://access.redhat.com/errata/RHSA-2026:8851
REF
https://access.redhat.com/errata/RHSA-2026:8852
REF
https://access.redhat.com/errata/RHSA-2026:8853
REF
https://access.redhat.com/errata/RHSA-2026:8855
REF
https://access.redhat.com/errata/RHSA-2026:8856
REF
https://access.redhat.com/errata/RHSA-2026:8860
REF
https://access.redhat.com/errata/RHSA-2026:8877
REF
https://access.redhat.com/errata/RHSA-2026:8878
REF
https://access.redhat.com/errata/RHSA-2026:8879
REF
https://access.redhat.com/errata/RHSA-2026:8881
REF
https://access.redhat.com/errata/RHSA-2026:8882
REF
https://access.redhat.com/errata/RHSA-2026:8930
REF
https://access.redhat.com/errata/RHSA-2026:8931
REF
https://access.redhat.com/errata/RHSA-2026:8949
REF
https://access.redhat.com/errata/RHSA-2026:9043
REF
https://access.redhat.com/errata/RHSA-2026:9044
REF
https://access.redhat.com/errata/RHSA-2026:9052
REF
https://access.redhat.com/errata/RHSA-2026:9090
REF
https://access.redhat.com/errata/RHSA-2026:9093
REF
https://access.redhat.com/errata/RHSA-2026:9094
REF
https://access.redhat.com/errata/RHSA-2026:9097
REF
https://access.redhat.com/errata/RHSA-2026:9098
REF
https://access.redhat.com/errata/RHSA-2026:9108
REF
https://access.redhat.com/errata/RHSA-2026:9109
REF
https://access.redhat.com/errata/RHSA-2026:9385
REF
https://access.redhat.com/errata/RHSA-2026:9434
REF
https://access.redhat.com/errata/RHSA-2026:9435
REF
https://access.redhat.com/errata/RHSA-2026:9436
REF
https://access.redhat.com/errata/RHSA-2026:9439
REF
https://access.redhat.com/errata/RHSA-2026:9440
REF
https://access.redhat.com/errata/RHSA-2026:9448
REF
https://access.redhat.com/errata/RHSA-2026:9453
REF
https://access.redhat.com/errata/RHSA-2026:9461
REF
https://access.redhat.com/errata/RHSA-2026:9695
REF
https://access.redhat.com/errata/RHSA-2026:9742
REF
https://access.redhat.com/errata/RHSA-2026:9872
REF
https://access.redhat.com/security/cve/CVE-2026-25679
REF
https://bugzilla.redhat.com/show_bug.cgi?id=2445356
REF
https://go.dev/cl/752180
REF
https://go.dev/issue/77578
REF
https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk
REF
https://pkg.go.dev/vuln/GO-2026-4601
REF
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25679.json
Exploit-DB