CVE-2026-39831

criticalPriorität · verfolgen · 0OT-Risiko · erhöhtEPSS 0.005 · 41. PerzentilDEEUFRRUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.48% (41st) EPSS

CVSS 9.1 · critical

Is it mine?

41 products

Prüfe deine Angriffsfläche

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · bewertet 2026-10-27

The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a "no-touch-required" extension in Permissions.Extensions from PublicKeyCallback.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.1

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 8.3–9.1

v3.19.1criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Nsecondary · FSTEC (BDU) RU

v3.19.1criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Nsecondary · ENISA EU

v3.19.1criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NsecondaryAusnutzbarkeit 3.9 · Auswirkung 5.2

v3.19.1criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Nsecondary · OSV

v3.18.3highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:Usecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-862USprimärCWE-862USCWE-862US

betroffene Produkte (41)

Betroffene Produkte und Versionsbereiche.

Amazon Linux 2alle Versionencert_bundDEcpe:/o:amazon:linux_2:-
Fedora Linuxalle Versionencert_bundDEcpe:/o:fedoraproject:fedora:-
IBM Business Automation Workflowalle Versionencert_bundDEcpe:/a:ibm:business_automation_workflow:-
IBM MQ Operatoralle Versionencert_bundDEcpe:/a:ibm:mq:operator
IBM Security Verify Accessalle Versionencert_bundDEcpe:/a:ibm:security_verify_access:-
Oracle Linuxalle Versionencert_bundDEcpe:/o:oracle:linux:-
RESF Rocky Linuxalle Versionencert_bundDEcpe:/o:resf:rocky_linux:-
Red Hat Enterprise Linuxalle Versionencert_bundDEcpe:/o:redhat:enterprise_linux:-
Red Hat Enterprise Linux 10alle Versionencert_bundDEcpe:/o:redhat:enterprise_linux:10
Red Hat Enterprise Linux Advanced Cluster Management for Kubernetesalle Versionencert_bundDEcpe:/o:redhat:enterprise_linux:advanced_cluster_management_for_kubernetes
Red Hat Enterprise Linux Advanced Cluster Securityalle Versionencert_bundDEcpe:/o:redhat:enterprise_linux:advanced_cluster_security
Red Hat Enterprise Linux Edge Manageralle Versionencert_bundDEcpe:/o:redhat:enterprise_linux:edge_manager
Red Hat Enterprise Linux MicroShiftalle Versionencert_bundDEcpe:/o:redhat:enterprise_linux:microshift
Red Hat Enterprise Linux Multicluster Engine for Kubernetesalle Versionencert_bundDEcpe:/o:redhat:enterprise_linux:multicluster_engine_for_kubernetes
Red Hat OpenShift API for Data Protectionalle Versionencert_bundDEcpe:/a:redhat:openshift:api_for_data_protection
Red Hat OpenShift Container Platformalle Versionencert_bundDEcpe:/a:redhat:openshift:container_platform
Red Hat OpenShift Container Platform 4.22.4alle Versionencert_bundDEcpe:/a:redhat:openshift:container_platform_4.22.4
Red Hat OpenShift Data Foundationalle Versionencert_bundDEcpe:/a:redhat:openshift:data_foundation
Red Hat OpenShift Migration Toolkit for Applicationsalle Versionencert_bundDEcpe:/a:redhat:openshift:migration_toolkit_for_applications
Red Hat OpenShift loggingalle Versionencert_bundDEcpe:/a:redhat:openshift:logging

20 von 41 angezeigt

Advisories (5)

Hersteller- und Ökosystem-Meldungen dazu.

WID-SEC-W-2026-1653Golang Go-Module (Net, Image, Crypto: Mehrere SchwachstellenDeutsch2026-05-21csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um erweiterte Privilegien zu erlangen, Cross-Site-Scripting-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand zu verursachen.
GHSA-89gr-r52h-f8rxgolang.org/x/crypto: FIDO/U2F security key physical presence check can be bypassed2026-06-25ghsa · osvUS
The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a "no-touch-required" extension in Permissions.Extensions from PublicKeyCallback.
CERTFR-2026-AVI-1366Multiples vulnérabilités dans les produits SplunkFrançais2026-10-22vendor · certfrFR
CERTFR-2026-AVI-1385Multiples vulnérabilités dans les produits VMwareFrançais2026-10-26vendor · certfrFR
GO-2026-5019Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh2026-05-22vendor · osvUS
The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a "no-touch-required" extension in Permissions.Extensions from PublicKeyCallback.

auch bekannt als (6)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu osv cert_bund certfr NVD CVE.org MITRE

veröffentlicht 2026-05-22geändert 2026-10-08

verwandt (11,479)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-84869US	—OT kritisch	0.92% (60th)	KEV	2026-09-08
A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circum…
CVE-2026-63219US	—OT kritisch	0.47% (40th)	—	2026-09-03
GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the API endpoint for creating a new formatter via file upload is…
CVE-2026-41679US	—OT kritisch	31.7% (98th)	Exploit	2026-04-23
Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. Prior to version 2026.416.0, an unauthenticated attacker can achieve full remote…
CVE-2025-40602US	—OT kritisch	2.76% (86th)	KEV	2025-12-18
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).
CVE-2025-20362US	high8.6OT kritisch	87.1% (100th)	KEV	2025-09-25
Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTD Software releases that are affected by…

+11474 weitere

Referenzen (13)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan