> CVE-2026-39836

« BACK_TO_HOME
PUBLISHED
2026-05-07 20:16
MODIFIED
2026-05-07 20:38
EPSS (Prob. Exploit)
0.63%
Top 49.4%
DATA SOURCES:
NVD 🔗 2026-05-07 FIRST EPSS 🔗 2026-11-08 OSV 🔗 2026-11-02 MSRC 🔗 2026-11-02

> DESCRIPTION

The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0).

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> RED HAT SECURITY ADVISORIES

Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.6 security update
Important: Red Hat OpenShift GitOps v1.19.6 security update
Red Hat Security Advisory: Red Hat Web Terminal Operator 1.14.0 release.
Red Hat Web Terminal Operator 1.14.0 has been released.
Red Hat Security Advisory: Red Hat Web Terminal Operator 1.13.0 release.
Red Hat Web Terminal Operator 1.13.0 has been released.
Red Hat Security Advisory: Red Hat Web Terminal Operator 1.11.1 release.
Red Hat Web Terminal Operator 1.11.1 has been released.
Red Hat Security Advisory: Red Hat Web Terminal Operator 1.15.1 release.
Red Hat Web Terminal Operator 1.15.1 has been released.
Red Hat Security Advisory: Red Hat Web Terminal Operator 1.16.1 release.
Red Hat Web Terminal Operator 1.16.1 has been released.
Red Hat Security Advisory: Red Hat Web Terminal Operator 1.12.1 release.
Red Hat Web Terminal Operator 1.12.1 has been released.
Red Hat Security Advisory: multicluster engine for Kubernetes v2.11.5 security update
Red Hat multicluster engine for Kubernetes v2.11 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this up...
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release Update
An update is now available for Red Hat Ansible Automation Platform 2.6
Red Hat Security Advisory: Red Hat AI Base Images 3.5.5 (Neuron)
Red Hat AI Base Images 3.5.5 (Neuron) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.4.6 (Neuron)
Red Hat AI Base Images 3.4.6 (Neuron) is now available.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Panic in Dial and LookupPort when handling NUL byte on Windows in net

AFFECTED PACKAGES:
Unknown / Unknown
152 versions affected
ALIASES:
BIT-golang-2026-39836, GO-2026-4971

> HISTORIQUE DES MODIFICATIONS

Première apparition
07/05/2026 20:16
Source: NVD
Total des modifications: 0 Dernière mise à jour: 6 months ago

> REFERENCES

https://go.dev/cl/775320
https://go.dev/issue/79006
https://groups.google.com/g/golang-announce/c/qcCIEXso47M
https://pkg.go.dev/vuln/GO-2026-4971
« BACK_TO_HOME