Beveiligingsadvies

CVE-2026-39828

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-22 02:31:26
Laatst bijgewerkt 2026-09-09 12:04:49
Toegewezen door Go
CVSS-score 6.3
Status PUBLISHED

Beschrijving

When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.