CVE-2026-25680 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.5 MEDIUM	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 16%

Affected Products (NVD)

Vendor	Product	Version
golang	net	𝑥 < 0.55.0

𝑥

= Vulnerable software versions

openSUSE / SLES Releases

openSUSE Product

Release

alloy

suse enterprise desktop 15 SP7	1.17.1-150700.15.23.1 fixed
suse enterprise sap 15 SP7	1.17.1-150700.15.23.1 fixed
suse enterprise server 15 SP7	1.17.1-150700.15.23.1 fixed

buildah

suse enterprise sap 15 SP7	1.35.5-150500.3.62.1 fixed
suse enterprise server 15 SP4	1.35.5-150400.3.68.1 fixed
suse enterprise server 15 SP5	1.35.5-150500.3.62.1 fixed
suse enterprise server 15 SP6	1.35.5-150500.3.62.1 fixed
suse enterprise server 15 SP7	1.35.5-150500.3.62.1 fixed

cosign

suse enterprise desktop 15 SP7	3.1.1-150400.3.45.1 fixed
suse enterprise sap 15 SP7	3.1.1-150400.3.45.1 fixed
suse enterprise server 15 SP4	3.1.1-150400.3.45.1 fixed
suse enterprise server 15 SP5	3.1.1-150400.3.45.1 fixed
suse enterprise server 15 SP6	3.1.1-150400.3.45.1 fixed
suse enterprise server 15 SP7	3.1.1-150400.3.45.1 fixed

cosign-bash-completion

suse enterprise desktop 15 SP7	3.1.1-150400.3.45.1 fixed
suse enterprise sap 15 SP7	3.1.1-150400.3.45.1 fixed
suse enterprise server 15 SP7	3.1.1-150400.3.45.1 fixed

cosign-zsh-completion

suse enterprise desktop 15 SP7	3.1.1-150400.3.45.1 fixed
suse enterprise sap 15 SP7	3.1.1-150400.3.45.1 fixed
suse enterprise server 15 SP7	3.1.1-150400.3.45.1 fixed

Amazon Linux Releases

Amazon Package

Release

amazon-cloudwatch-agent

Amazon Linux 2	0:1.300067.1-1.amzn2 fixed
Amazon Linux 2023	0:1.300067.1-1.amzn2023 fixed

cni-plugins

Amazon Linux 2	0:1.7.1-1.amzn2.0.7 fixed
Amazon Linux 2023	0:1.7.1-1.amzn2023.0.7 fixed

cni-plugins-debuginfo

Amazon Linux 2	0:1.7.1-1.amzn2.0.7 fixed
Amazon Linux 2023	0:1.7.1-1.amzn2023.0.7 fixed

cni-plugins-debugsource

Amazon Linux 2023

0:1.7.1-1.amzn2023.0.7

fixed

containerd

Amazon Linux 2023

0:2.2.4-1.amzn2023.0.2

fixed

containerd-debuginfo

Amazon Linux 2023

0:2.2.4-1.amzn2023.0.2

fixed

containerd-debugsource

Amazon Linux 2023

0:2.2.4-1.amzn2023.0.2

fixed

containerd-stress

Amazon Linux 2023

0:2.2.4-1.amzn2023.0.2

fixed

containerd-stress-debuginfo

Amazon Linux 2023

0:2.2.4-1.amzn2023.0.2

fixed

credentials-fetcher

Amazon Linux 2023

0:2.0.3-1.amzn2023.0.1

fixed

cri-tools

Amazon Linux 2

0:1.32.0-1.amzn2.0.7

fixed

cri-tools-debuginfo

Amazon Linux 2

0:1.32.0-1.amzn2.0.7

fixed

docker

Amazon Linux 2023

0:25.0.16-1.amzn2023.0.2

fixed

docker-debuginfo

Amazon Linux 2023

0:25.0.16-1.amzn2023.0.2

fixed

docker-debugsource

Amazon Linux 2023

0:25.0.16-1.amzn2023.0.2

fixed

ecs-init

Amazon Linux 2023

0:1.105.0-1.amzn2023

fixed

git-lfs

Amazon Linux 2023

0:3.7.1-81.amzn2023

fixed

git-lfs-debuginfo

Amazon Linux 2023

0:3.7.1-81.amzn2023

fixed

git-lfs-debugsource

Amazon Linux 2023

0:3.7.1-81.amzn2023

fixed

nerdctl

Amazon Linux 2	0:2.2.2-1.amzn2.0.3 fixed
Amazon Linux 2023	0:2.2.2-1.amzn2023.0.3 fixed

nerdctl-debuginfo

Amazon Linux 2

0:2.2.2-1.amzn2.0.3

fixed

rclone

Amazon Linux 2

0:1.55.1-1.amzn2.0.8

fixed

rclone-debuginfo

Amazon Linux 2

0:1.55.1-1.amzn2.0.8

fixed

runfinch-finch

Amazon Linux 2023

0:1.17.1-1.amzn2023.0.3

fixed

soci-snapshotter

Amazon Linux 2023

0:0.14.1-1.amzn2023.0.1

fixed

Amazon Linux 2023

0:4.53.3-14.amzn2023

fixed

yq-debuginfo

Amazon Linux 2023

0:4.53.3-14.amzn2023

fixed

yq-debugsource

Amazon Linux 2023

0:4.53.3-14.amzn2023

fixed

Azure Linux Releases

Azure Package

Release

application-gateway-kubernetes-ingress

Azure Linux 3.0

0:1.7.7-4.azl3

fixed

cert-manager

Azure Linux 3.0

0:1.12.15-8.azl3

fixed

cf-cli

Azure Linux 3.0

0:8.7.11-7.azl3

fixed

cloud-provider-kubevirt

Azure Linux 3.0

0:0.5.1-5.azl3

fixed

cni-plugins

Azure Linux 3.0

0:1.4.0-6.azl3

fixed

containerd2

Azure Linux 3.0

0:2.2.4-4.azl3

fixed

containerized-data-importer

Azure Linux 3.0

0:1.62.0-5.azl3

fixed

cri-tools

Azure Linux 3.0

0:1.32.0-6.azl3

fixed

dasel

Azure Linux 3.0

0:2.8.1-4.azl3

fixed

docker-buildx

Azure Linux 3.0

0:0.14.0-15.azl3

fixed

docker-compose

Azure Linux 3.0

0:2.27.0-13.azl3

fixed

Azure Linux 3.0

0:2.62.0-17.azl3

fixed

influxdb

Azure Linux 3.0

0:2.7.5-17.azl3

fixed

keda

Azure Linux 3.0

0:2.14.1-14.azl3

fixed

kube-vip-cloud-provider

Azure Linux 3.0

0:0.0.10-6.azl3

fixed

kubernetes

Azure Linux 3.0

0:1.30.10-25.azl3

fixed

kubevirt

Azure Linux 3.0

0:1.7.1-5.azl3

fixed

multus

Azure Linux 3.0

0:4.0.2-9.azl3

fixed

packer

Azure Linux 3.0

0:1.9.5-14.azl3

fixed

prometheus-adapter

Azure Linux 3.0

0:0.12.0-6.azl3

fixed

sriov-network-device-plugin

Azure Linux 3.0

0:3.7.0-6.azl3

fixed

telegraf

Azure Linux 3.0

0:1.31.0-23.azl3

fixed

Common Weakness Enumeration

CWE-400 - Uncontrolled Resource Consumption
The software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

Vulnerability Media Exposure

[GERMAN] Golang Go-Module (Net, Image, Crypto: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um erweiterte Privilegien zu erlangen, Cross-Site-Scripting-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand zu verursachen.
Published: 2026-05-21T22:00:00+00:00

References

https://go.dev/cl/781702

https://go.dev/issue/79573

https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8

https://pkg.go.dev/vuln/GO-2026-5028