CVE-2026-39828
EUVD-2026-3139422.05.2026, 04:16
When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| golang | crypto | 𝑥 < 0.52.0 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Red Hat | Cryostat 4 on RHEL 9 | 4.2.0-19 ≤ 𝑥 < * | ADP |
| Red Hat | RHEM 1.0 for RHEL 9 | 0:1.0.3-1.el9em ≤ 𝑥 < * | ADP |
| Red Hat | RHEM 1.1 for RHEL 10 | 0:1.1.3-1.el10em ≤ 𝑥 < * | ADP |
| Red Hat | RHEM 1.1 for RHEL 9 | 0:1.1.3-1.el9em ≤ 𝑥 < * | ADP |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.19 | 1786613805 ≤ 𝑥 < * | ADP |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.19 | 1786613805 ≤ 𝑥 < * | ADP |
| Red Hat | DevWorkspace Operator 0.42 | 1782400868 ≤ 𝑥 < * | ADP |
| Red Hat | DevWorkspace Operator 0.42 | 1782401674 ≤ 𝑥 < * | ADP |
| Red Hat | multicluster engine for Kubernetes 2.10 | 1784646026 ≤ 𝑥 < * | ADP |
| Red Hat | multicluster engine for Kubernetes 2.6 | 1783332008 ≤ 𝑥 < * | ADP |
| Red Hat | multicluster engine for Kubernetes 2.6 | 1783333268 ≤ 𝑥 < * | ADP |
| Red Hat | multicluster engine for Kubernetes 2.6 | 1783025820 ≤ 𝑥 < * | ADP |
| Red Hat | multicluster engine for Kubernetes 2.8 | 1784646786 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift API for Data Protection 1.3 | 1785177359 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift API for Data Protection 1.3 | 1785177438 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift API for Data Protection 1.3 | 1785180878 ≤ 𝑥 < * | ADP |
| Red Hat | OpenShift API for Data Protection 1.6 | 1784058822 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.15 | 1784229508 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.16 | 1786908777 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Security 4.9 | 1781686446 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Security 4.9 | 1782891812 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Security 4.9 | 1782891812 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.10 | 1781686458 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.10 | 1782891789 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.10 | 1782891789 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.11 | 1783352589 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.0 | 1783502022 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.0 | 1783502465 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.0 | 1783502025 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.0 | 1783502494 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.0 | 1783502401 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.0 | 1783502403 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.0 | 1783502022 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.0 | 1783502023 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.0 | 1783502029 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.0 | 1783502445 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784194638 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784194353 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784196588 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784195620 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784194309 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784194144 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784194188 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784194653 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784194144 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784194980 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784194347 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784194971 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784128388 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784128860 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784126780 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784127787 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784126762 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784127762 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784126832 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784126774 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784127791 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784127135 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784126733 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784127775 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.7.4 | 1783057515 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.7.4 | 1783057529 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.7.4 | 1783057884 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.7.4 | 1783058067 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.7.4 | 1783057868 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.7.4 | 1783058284 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.8.1 | 1783612432 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.8.1 | 1783611973 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.8.1 | 1783612714 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.8.1 | 1783611805 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.8.1 | 1784121108 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.8.1 | 1783612119 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Builds 1.8.1 | 1783612163 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.22 | 1785884688 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932114 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782931768 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932104 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783536000 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783535989 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783536515 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932521 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783018461 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783018421 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932812 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783537001 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932919 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783537586 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932969 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933015 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933042 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783537392 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933235 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933251 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783537955 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933417 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783537742 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933602 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783019377 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782934054 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782934036 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782934284 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift GitOps 1.19 | 1785149260 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift GitOps 1.2 | 1785211346 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.1 | 1783750447 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.12 | 1783751865 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.12 | 1784353904 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.15 | 1784351966 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.16 | 1783955846 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.9 | 1784125838 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.3 | 1783968508 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.3 | 1783961973 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.3 | 1783968644 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.3 | 1783959819 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.3 | 1783969365 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.3 | 1783968972 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.3 | 1783969365 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.3 | 1783969365 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.3 | 1783968644 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 4-1.4.2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 4-1.4.3 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1783330572 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1783330572 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1783330691 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1783326690 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1783332061 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1783332625 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1783326847 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1783332625 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1783332625 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1783326690 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1783183848 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1782992727 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1782903492 ≤ 𝑥 < * | ADP |
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| golang-go.crypto |
| ||||||||||||||
| snapd |
| ||||||||||||||
| google-guest-agent |
| ||||||||||||||
| lxd |
|
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| alloy |
| ||||||||||||||||
| amazon-ssm-agent |
| ||||||||||||||||
| apptainer |
| ||||||||||||||||
| apptainer-sle15_6 |
| ||||||||||||||||
| buildah |
| ||||||||||||||||
| cosign |
| ||||||||||||||||
| cosign-bash-completion |
| ||||||||||||||||
| cosign-zsh-completion |
| ||||||||||||||||
| google-guest-agent |
| ||||||||||||||||
| google-osconfig-agent |
| ||||||||||||||||
| kubevirt-manifests |
| ||||||||||||||||
| kubevirt-virtctl |
| ||||||||||||||||
| terraform-provider-aws |
| ||||||||||||||||
| terraform-provider-azurerm |
| ||||||||||||||||
| terraform-provider-external |
| ||||||||||||||||
| terraform-provider-google |
| ||||||||||||||||
| terraform-provider-helm |
| ||||||||||||||||
| terraform-provider-kubernetes |
| ||||||||||||||||
| terraform-provider-local |
| ||||||||||||||||
| terraform-provider-null |
| ||||||||||||||||
| terraform-provider-random |
| ||||||||||||||||
| terraform-provider-tls |
|
Amazon Linux Releases
Amazon Package | |||||
|---|---|---|---|---|---|
| amazon-cloudwatch-agent |
| ||||
| containerd |
| ||||
| containerd-debuginfo |
| ||||
| containerd-debugsource |
| ||||
| containerd-stress |
| ||||
| containerd-stress-debuginfo |
| ||||
| nerdctl |
| ||||
| nerdctl-debuginfo |
| ||||
| rclone |
| ||||
| rclone-debuginfo |
| ||||
| rclone-debugsource |
| ||||
| runfinch-finch |
|
Azure Linux Releases
Common Weakness Enumeration
- CWE-295 - Improper Certificate ValidationThe software does not validate, or incorrectly validates, a certificate.
- CWE-281 - Improper Preservation of PermissionsThe software does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.
References