CWE-1046 vulnerabilities

This update includes the following RPMs: golang1.26: * golang1.26-1.26.3-2.2.hum1 (aarch64, x86_64) * golang1.26-bin-1.26.3-2.2.hum1 (aarch64, x86_64) * golang1.26-docs-1.26.3-2.2.hum1 (noarch) * golang1.26-misc-1.26.3-2.2.hum1 (noarch) * golang1.26-src-1.26.3-2.2.hum1 (noarch) * golang1.26-tests-1.26.3-2.2.hum1 (noarch) * golang1.26-1.26.3-2.2.hum1.src (src)

CVE-2026-23955 is a medium severity vulnerability in the EVerest EV charging software stack (everest-core) prior to version 2025.9.0. The flaw arises from improper string concatenation of integer values to literal strings when throwing errors, causing pointer arithmetic instead of expected integer printing. This behavior can be exploited by a malicious operator with high privileges and requiring user interaction to read unintended memory regions, including heap and stack areas, potentially exposing sensitive information. The vulnerability does not affect integrity or availability but impacts confidentiality. No known exploits are currently reported in the wild. The issue is fixed in version 2025.9.0.