GO-2026-5543

vendorUSosv

Go-ntlmssp NTLM challenges can panic on malformed payloads in github.com/Azure/go-ntlmssp

view advisory published 2026-07-24Licence: per source

Go-ntlmssp NTLM challenges can panic on malformed payloads in github.com/Azure/go-ntlmssp

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-32952UShigh7.5—
go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan