Search: CVE-2026-39828

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.3	EPSS 0.4%	CVE-2026-39828golang.org/x/crypto/ssh · Incorrect Authorization Medium6.3EPSS 0.4%2026-05-22CVE Database V5CVE-2026-39828 When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error. EPSS 0.4%Vulnerability CWE-863	CVE Database V5	2026-05-22

Page 1 of 1 · 6 duplicate CVE records merged