BDU:2026-15293 (CVE-2026-39821)

Vulnerability from fstec – Published: 2026-09-25 – Updated: 2026-09-25 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимость пакета golang-x-net языка программирования Golang, связанная с неправильной проверкой небезопасной эквивалентности входных данных, позволяющая нарушителю обойти существующие ограничения безопасности и выполнить произвольный код
Summary
Уязвимость пакета golang-x-net языка программирования Golang связана с неправильной проверкой небезопасной эквивалентности входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти существующие ограничения безопасности и выполнить произвольный код
Severity
6.6 (Medium) CVSS 2.0
AV:N/AC:H/Au:S/C:C/I:C/A:N
8.2 (High) CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
Class
Code vulnerability
Status
Confirmed by the vendor
Exploitation
Data structure manipulation
Incidents
Being clarified
Remediation
Software update
CWE
  • CWE-1289 - Неправильная проверка небезопасной эквивалентности во входных данных
Aliases
CVE-2026-39821
References
Impacted products
Vendors
Red Hat, Inc., Сообщество свободного программного обеспечения, Canonical Ltd., ООО «Ред Софт», The Go Project
Products
Red Hat Enterprise Linux, Debian GNU/Linux, Ubuntu, Red Hat 3scale API Management Platform, РЕД ОС (запись в едином реестре российских программ №3751), Red Hat OpenShift Container Platform, Red Hat Satellite, Red Hat OpenStack Platform, OpenShift Developer Tools and Services, Red Hat Ceph Storage, Red Hat OpenShift on AWS, Node HealthCheck Operator, Network Observability Operator, Red Hat OpenShift Virtualization, OpenShift Serverless, OpenShift Pipelines, Red Hat OpenShift Lightspeed, Red Hat Ansible Automation Platform, Red Hat OpenShift Cluster Manager CLI, Red Hat Advanced Cluster Management for Kubernetes 2, Multiarch Tuning Operator, Assisted Installer for Red Hat OpenShift Container Platform, OpenShift API for Data Protection, Red Hat Quay, Red Hat Certification Program for Red Hat Enterprise Linux, Red Hat Connectivity Link, Fence Agents Remediation Operator, Red Hat Hardened Images, multicluster engine for Kubernetes, Red Hat OpenShift AI, Compliance Operator, Deployment Validation Operator, ExternalDNS Operator, File Integrity Operator, Machine Deletion Remediation Operator, Security Profiles Operator, Gatekeeper, Power monitoring for Red Hat OpenShift, Red Hat OpenShift for Windows Containers, Red Hat Trusted Artifact Signer, Red Hat OpenShift Dev Spaces, Red Hat Openshift Data Foundation, Red Hat Advanced Cluster Management for Kubernetes, Red Hat Advanced Cluster Security, Red Hat Edge Manager, Red Hat Enterprise Linux AI, Cluster Observability Operator, Red Hat OpenShift Builds, Red Hat OpenShift GitOps, Multicluster Global Hub, golang.org/x/net/html, Cert Manager support for Red Hat OpenShift release, Logging for Red Hat OpenShift, Logging subsystem for Red Hat OpenShift, Red Hat Advanced Cluster Security for Kubernetes, Red Hat Migration Toolkit for Containers, Red Hat Migration Toolkit for Applications, Red Hat multicluster global hub, Red Hat OpenShift Workload Availability, Red Hat OpenShift distributed tracing, Streams for Apache Kafka, Red Hat OpenShift Service Mesh, Red Hat Web Terminal
Versions
7 (Red Hat Enterprise Linux), 9 (Debian GNU/Linux), 18.04 LTS (Ubuntu), 8 (Red Hat Enterprise Linux), 20.04 LTS (Ubuntu), 2 (Red Hat 3scale API Management Platform), 11 (Debian GNU/Linux), 12 (Debian GNU/Linux), 7.3 (РЕД ОС), 4 (Red Hat OpenShift Container Platform), 6 (Red Hat Satellite), 9 (Red Hat Enterprise Linux), 16.2 (Red Hat OpenStack Platform), - (OpenShift Developer Tools and Services), 5 (Red Hat Ceph Storage), - (Red Hat OpenShift on AWS), - (Node HealthCheck Operator), - (Network Observability Operator), 4 (Red Hat OpenShift Virtualization), - (OpenShift Serverless), 17.1 (Red Hat OpenStack Platform), - (OpenShift Pipelines), 6 (Red Hat Ceph Storage), 8.6 Advanced Mission Critical Update Support (Red Hat Enterprise Linux), 7 Extended Lifecycle Support (Red Hat Enterprise Linux), 6.16 for RHEL 8 (Red Hat Satellite), 6.16 for RHEL 9 (Red Hat Satellite), 4.16 (Red Hat OpenShift Container Platform), 8 (Red Hat Ceph Storage), - (Red Hat OpenShift Lightspeed), 2.5 for RHEL 8 (Red Hat Ansible Automation Platform), 2.5 for RHEL 9 (Red Hat Ansible Automation Platform), - (Red Hat OpenShift Cluster Manager CLI), - (Red Hat Advanced Cluster Management for Kubernetes 2), 10 (Red Hat Enterprise Linux), 8.8 Telecommunications Update Service (Red Hat Enterprise Linux), 8.8 Update Services for SAP Solutions (Red Hat Enterprise Linux), 9.2 Update Services for SAP Solutions (Red Hat Enterprise Linux), 4.18 (Red Hat OpenShift Container Platform), 4.19 (Red Hat OpenShift Container Platform), - (Multiarch Tuning Operator), 13 (Debian GNU/Linux), 8.6 Extended Update Support Long-Life Add-On (Red Hat Enterprise Linux), 2 (Assisted Installer for Red Hat OpenShift Container Platform), 9.6 Extended Update Support (Red Hat Enterprise Linux), 8.0 (РЕД ОС), 9 (Red Hat Ceph Storage), 10.0 Extended Update Support (Red Hat Enterprise Linux), 6.17 for RHEL 9 (Red Hat Satellite), 1.3 (OpenShift API for Data Protection), 3.12 (Red Hat Quay), 3.9 (Red Hat Quay), 3.14 (Red Hat Quay), 3.15 (Red Hat Quay), 3.16 (Red Hat Quay), 6.18 (Red Hat Satellite), 9 (Red Hat Certification Program for Red Hat Enterprise Linux), 1 (Red Hat Connectivity Link), 2.6 for RHEL 9 (Red Hat Ansible Automation Platform), 6.18 for RHEL 9 (Red Hat Satellite), 2.6 (Red Hat Ansible Automation Platform), - (Fence Agents Remediation Operator), 1 (Red Hat Hardened Images), 2.9 (multicluster engine for Kubernetes), 2.25 (Red Hat OpenShift AI), - (Compliance Operator), - (Deployment Validation Operator), - (ExternalDNS Operator), - (File Integrity Operator), - (Machine Deletion Remediation Operator), - (Security Profiles Operator), 3 (Gatekeeper), - (Power monitoring for Red Hat OpenShift), - (Red Hat OpenShift for Windows Containers), 4.20 (Red Hat OpenShift Container Platform), 9.4 Update Services for SAP Solutions (Red Hat Enterprise Linux), 1.4 (Red Hat Trusted Artifact Signer), 2.6 (multicluster engine for Kubernetes), 2.8 (multicluster engine for Kubernetes), 4.21 (Red Hat OpenShift Container Platform), 4.22 (Red Hat OpenShift Container Platform), 3.29 (Red Hat OpenShift Dev Spaces), 4.22 (Red Hat Openshift Data Foundation), 1.6 (OpenShift API for Data Protection), 2.13 (Red Hat Advanced Cluster Management for Kubernetes), 4.9 (Red Hat Advanced Cluster Security), 1.0 (Red Hat Edge Manager), 1.1 (Red Hat Edge Manager), 3.4 (Red Hat Enterprise Linux AI), 1.5.0 (Cluster Observability Operator), 3.10 (Red Hat Quay), 3.17 (Red Hat Quay), 1.8.1 (Red Hat OpenShift Builds), 1.19 (Red Hat OpenShift GitOps), 2.7 (Red Hat Ansible Automation Platform), 6.19 for RHEL 9 (Red Hat Satellite), 3.4 (Red Hat OpenShift AI), 4.18 (Red Hat Openshift Data Foundation), 1.6.5 (Multicluster Global Hub), 2.11 (Red Hat Advanced Cluster Management for Kubernetes), 6.19 (Red Hat Satellite), до 0.55.0 (golang.org/x/net/html), 2.11 (multicluster engine for Kubernetes), 2.6 for RHEL 10 (Red Hat Ansible Automation Platform), 1.19 (Cert Manager support for Red Hat OpenShift release), 6 (Logging for Red Hat OpenShift), 6.2 (Logging subsystem for Red Hat OpenShift), 6.4 (Logging subsystem for Red Hat OpenShift), 6.5 (Logging subsystem for Red Hat OpenShift), 1.4.9 (Multicluster Global Hub), 1.5 (OpenShift API for Data Protection), 4.10 (Red Hat Advanced Cluster Security for Kubernetes), 4.11 (Red Hat Advanced Cluster Security for Kubernetes), 1.8 (Red Hat Migration Toolkit for Containers), 8.1 (Red Hat Migration Toolkit for Applications), 8.2 (Red Hat Migration Toolkit for Applications), 1.5.3 (Red Hat multicluster global hub), 1.20 (Red Hat OpenShift GitOps), 0.12 (Red Hat OpenShift Workload Availability), 0.13 (Red Hat OpenShift Workload Availability), 0.3 (Red Hat OpenShift Workload Availability), 0.7 (Red Hat OpenShift Workload Availability), 0.8 (Red Hat OpenShift Workload Availability), 5.7 (Red Hat OpenShift Workload Availability), 2.7 for RHEL 10 (Red Hat Ansible Automation Platform), 2.7 for RHEL 9 (Red Hat Ansible Automation Platform), 3.11.1 (Red Hat OpenShift distributed tracing), 3.2.1 (Streams for Apache Kafka), 1.7.3 (Multicluster Global Hub), 1.7.3 (Red Hat OpenShift Builds), 3.10.2 (Red Hat OpenShift distributed tracing), 2.6 (Red Hat OpenShift Service Mesh), 3.0 (Red Hat OpenShift Service Mesh), 3.1 (Red Hat OpenShift Service Mesh), 3.2 (Red Hat OpenShift Service Mesh), 3.3 (Red Hat OpenShift Service Mesh), 1.11 (Red Hat Web Terminal), 1.12 (Red Hat Web Terminal), 1.13 (Red Hat Web Terminal), 1.14 (Red Hat Web Terminal), 1.15 (Red Hat Web Terminal), 1.16 (Red Hat Web Terminal)
Product types
Operating system, Application software, Appliance software, Virtualization software, Network device, Network software
Platforms
Red Hat, Inc. Red Hat Enterprise Linux 7, Сообщество свободного программного обеспечения Debian GNU/Linux 9, Canonical Ltd. Ubuntu 18.04 LTS, Inc. Red Hat Enterprise Linux 8, Canonical Ltd. Ubuntu 20.04 LTS, Сообщество свободного программного обеспечения Debian GNU/Linux 11, Сообщество свободного программного обеспечения Debian GNU/Linux 12, ООО «Ред Софт» РЕД ОС 7.3 (запись в едином реестре российских программ №3751), Inc. Red Hat Enterprise Linux 9, Inc. Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Inc. Red Hat Enterprise Linux 7 Extended Lifecycle Support, Inc. Red Hat Enterprise Linux 10, Inc. Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Inc. Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Inc. Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Сообщество свободного программного обеспечения Debian GNU/Linux 13, Inc. Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On, Inc. Red Hat Enterprise Linux 9.6 Extended Update Support, ООО «Ред Софт» РЕД ОС 8.0 (запись в едином реестре российских программ №3751), Inc. Red Hat Enterprise Linux 10.0 Extended Update Support, Inc. Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions, Inc. Red Hat Enterprise Linux AI 3.4
Mitigations
В условиях отсутствия обновлений безопасности от производителя рекомендуется придерживаться "Рекомендаций по безопасной настройке операционных систем LINUX", изложенных в методическом документе ФСТЭК России, утверждённом 25 декабря 2022 года. Использование рекомендаций: Для Ред ОС: http://repo.red-soft.ru/redos/7.3c/x86_64/updates/ http://repo.red-soft.ru/redos/8.0/x86_64/updates/ Для Debian GNU/Linux: https://security-tracker.debian.org/tracker/CVE-2026-39821 https://deb.freexian.com/extended-lts/tracker/CVE-2026-39821 Для Ubuntu: https://ubuntu.com/security/CVE-2026-39821 Для программных продуктов Red Hat, Inc.: https://access.redhat.com/security/cve/CVE-2026-39821
Remediation
TO2904 Обновление Go, TO2905 Обновление Go, TO2906 Обновление Go, TO2907 Обновление Go
To clipboard 

{
  "CVSS 2.0": "AV:N/AC:H/Au:S/C:C/I:C/A:N",
  "CVSS 3.0": "AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "TO2904, TO2905, TO2906, TO2907",
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": "TO2904 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Go, TO2905 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Go, TO2906 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Go, TO2907 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Go",
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Red Hat, Inc., \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, Canonical Ltd., \u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb, The Go Project",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "7 (Red Hat Enterprise Linux), 9 (Debian GNU/Linux), 18.04 LTS (Ubuntu), 8 (Red Hat Enterprise Linux), 20.04 LTS (Ubuntu), 2 (Red Hat 3scale API Management Platform), 11 (Debian GNU/Linux), 12 (Debian GNU/Linux), 7.3 (\u0420\u0415\u0414 \u041e\u0421), 4 (Red Hat OpenShift Container Platform), 6 (Red Hat Satellite), 9 (Red Hat Enterprise Linux), 16.2 (Red Hat OpenStack Platform), - (OpenShift Developer Tools and Services), 5 (Red Hat Ceph Storage), - (Red Hat OpenShift on AWS), - (Node HealthCheck Operator), - (Network Observability Operator), 4 (Red Hat OpenShift Virtualization), - (OpenShift Serverless), 17.1 (Red Hat OpenStack Platform), - (OpenShift Pipelines), 6 (Red Hat Ceph Storage), 8.6 Advanced Mission Critical Update Support (Red Hat Enterprise Linux), 7 Extended Lifecycle Support (Red Hat Enterprise Linux), 6.16 for RHEL 8 (Red Hat Satellite), 6.16 for RHEL 9 (Red Hat Satellite), 4.16 (Red Hat OpenShift Container Platform), 8 (Red Hat Ceph Storage), - (Red Hat OpenShift Lightspeed), 2.5 for RHEL 8 (Red Hat Ansible Automation Platform), 2.5 for RHEL 9 (Red Hat Ansible Automation Platform), - (Red Hat OpenShift Cluster Manager CLI), - (Red Hat Advanced Cluster Management for Kubernetes 2), 10 (Red Hat Enterprise Linux), 8.8 Telecommunications Update Service (Red Hat Enterprise Linux), 8.8 Update Services for SAP Solutions (Red Hat Enterprise Linux), 9.2 Update Services for SAP Solutions (Red Hat Enterprise Linux), 4.18 (Red Hat OpenShift Container Platform), 4.19 (Red Hat OpenShift Container Platform), - (Multiarch Tuning Operator), 13 (Debian GNU/Linux), 8.6 Extended Update Support Long-Life Add-On (Red Hat Enterprise Linux), 2 (Assisted Installer for Red Hat OpenShift Container Platform), 9.6 Extended Update Support (Red Hat Enterprise Linux), 8.0 (\u0420\u0415\u0414 \u041e\u0421), 9 (Red Hat Ceph Storage), 10.0 Extended Update Support (Red Hat Enterprise Linux), 6.17 for RHEL 9 (Red Hat Satellite), 1.3 (OpenShift API for Data Protection), 3.12 (Red Hat Quay), 3.9 (Red Hat Quay), 3.14 (Red Hat Quay), 3.15 (Red Hat Quay), 3.16 (Red Hat Quay), 6.18 (Red Hat Satellite), 9 (Red Hat Certification Program for Red Hat Enterprise Linux), 1 (Red Hat Connectivity Link), 2.6 for RHEL 9 (Red Hat Ansible Automation Platform), 6.18 for RHEL 9 (Red Hat Satellite), 2.6 (Red Hat Ansible Automation Platform), - (Fence Agents Remediation Operator), 1 (Red Hat Hardened Images), 2.9 (multicluster engine for Kubernetes), 2.25 (Red Hat OpenShift AI), - (Compliance Operator), - (Deployment Validation Operator), - (ExternalDNS Operator), - (File Integrity Operator), - (Machine Deletion Remediation Operator), - (Security Profiles Operator), 3 (Gatekeeper), - (Power monitoring for Red Hat OpenShift), - (Red Hat OpenShift for Windows Containers), 4.20 (Red Hat OpenShift Container Platform), 9.4 Update Services for SAP Solutions (Red Hat Enterprise Linux), 1.4 (Red Hat Trusted Artifact Signer), 2.6 (multicluster engine for Kubernetes), 2.8 (multicluster engine for Kubernetes), 4.21 (Red Hat OpenShift Container Platform), 4.22 (Red Hat OpenShift Container Platform), 3.29 (Red Hat OpenShift Dev Spaces), 4.22 (Red Hat Openshift Data Foundation), 1.6 (OpenShift API for Data Protection), 2.13 (Red Hat Advanced Cluster Management for Kubernetes), 4.9 (Red Hat Advanced Cluster Security), 1.0 (Red Hat Edge Manager), 1.1 (Red Hat Edge Manager), 3.4 (Red Hat Enterprise Linux AI), 1.5.0 (Cluster Observability Operator), 3.10 (Red Hat Quay), 3.17 (Red Hat Quay), 1.8.1 (Red Hat OpenShift Builds), 1.19 (Red Hat OpenShift GitOps), 2.7 (Red Hat Ansible Automation Platform), 6.19 for RHEL 9 (Red Hat Satellite), 3.4 (Red Hat OpenShift AI), 4.18 (Red Hat Openshift Data Foundation), 1.6.5 (Multicluster Global Hub), 2.11 (Red Hat Advanced Cluster Management for Kubernetes), 6.19 (Red Hat Satellite), \u0434\u043e 0.55.0 (golang.org/x/net/html), 2.11 (multicluster engine for Kubernetes), 2.6 for RHEL 10 (Red Hat Ansible Automation Platform), 1.19 (Cert Manager support for Red Hat OpenShift release), 6 (Logging for Red Hat OpenShift), 6.2 (Logging subsystem for Red Hat OpenShift), 6.4 (Logging subsystem for Red Hat OpenShift), 6.5 (Logging subsystem for Red Hat OpenShift), 1.4.9 (Multicluster Global Hub), 1.5 (OpenShift API for Data Protection), 4.10 (Red Hat Advanced Cluster Security for Kubernetes), 4.11 (Red Hat Advanced Cluster Security for Kubernetes), 1.8 (Red Hat Migration Toolkit for Containers), 8.1 (Red Hat Migration Toolkit for Applications), 8.2 (Red Hat Migration Toolkit for Applications), 1.5.3 (Red Hat multicluster global hub), 1.20 (Red Hat OpenShift GitOps), 0.12 (Red Hat OpenShift Workload Availability), 0.13 (Red Hat OpenShift Workload Availability), 0.3 (Red Hat OpenShift Workload Availability), 0.7 (Red Hat OpenShift Workload Availability), 0.8 (Red Hat OpenShift Workload Availability), 5.7 (Red Hat OpenShift Workload Availability), 2.7 for RHEL 10 (Red Hat Ansible Automation Platform), 2.7 for RHEL 9 (Red Hat Ansible Automation Platform), 3.11.1 (Red Hat OpenShift distributed tracing), 3.2.1 (Streams for Apache Kafka), 1.7.3 (Multicluster Global Hub), 1.7.3 (Red Hat OpenShift Builds), 3.10.2 (Red Hat OpenShift distributed tracing), 2.6 (Red Hat OpenShift Service Mesh), 3.0 (Red Hat OpenShift Service Mesh), 3.1 (Red Hat OpenShift Service Mesh), 3.2 (Red Hat OpenShift Service Mesh), 3.3 (Red Hat OpenShift Service Mesh), 1.11 (Red Hat Web Terminal), 1.12 (Red Hat Web Terminal), 1.13 (Red Hat Web Terminal), 1.14 (Red Hat Web Terminal), 1.15 (Red Hat Web Terminal), 1.16 (Red Hat Web Terminal)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0412 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c\u0441\u044f \"\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c LINUX\", \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u043c\u0435\u0442\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u0424\u0421\u0422\u042d\u041a \u0420\u043e\u0441\u0441\u0438\u0438, \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e\u043c 25 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f \u0420\u0435\u0434 \u041e\u0421:\nhttp://repo.red-soft.ru/redos/7.3c/x86_64/updates/\nhttp://repo.red-soft.ru/redos/8.0/x86_64/updates/\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2026-39821\nhttps://deb.freexian.com/extended-lts/tracker/CVE-2026-39821\n\n\u0414\u043b\u044f Ubuntu:\nhttps://ubuntu.com/security/CVE-2026-39821\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Red Hat, Inc.:\nhttps://access.redhat.com/security/cve/CVE-2026-39821",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "22.05.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "25.09.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "25.09.2026",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2026-15293",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2026-39821",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Red Hat Enterprise Linux, Debian GNU/Linux, Ubuntu, Red Hat 3scale API Management Platform, \u0420\u0415\u0414 \u041e\u0421 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751), Red Hat OpenShift Container Platform, Red Hat Satellite, Red Hat OpenStack Platform, OpenShift Developer Tools and Services, Red Hat Ceph Storage, Red Hat OpenShift on AWS, Node HealthCheck Operator, Network Observability Operator, Red Hat OpenShift Virtualization, OpenShift Serverless, OpenShift Pipelines, Red Hat OpenShift Lightspeed, Red Hat Ansible Automation Platform, Red Hat OpenShift Cluster Manager CLI, Red Hat Advanced Cluster Management for Kubernetes 2, Multiarch Tuning Operator, Assisted Installer for Red Hat OpenShift Container Platform, OpenShift API for Data Protection, Red Hat Quay, Red Hat Certification Program for Red Hat Enterprise Linux, Red Hat Connectivity Link, Fence Agents Remediation Operator, Red Hat Hardened Images, multicluster engine for Kubernetes, Red Hat OpenShift AI, Compliance Operator, Deployment Validation Operator, ExternalDNS Operator, File Integrity Operator, Machine Deletion Remediation Operator, Security Profiles Operator, Gatekeeper, Power monitoring for Red Hat OpenShift, Red Hat OpenShift for Windows Containers, Red Hat Trusted Artifact Signer, Red Hat OpenShift Dev Spaces, Red Hat Openshift Data Foundation, Red Hat Advanced Cluster Management for Kubernetes, Red Hat Advanced Cluster Security, Red Hat Edge Manager, Red Hat Enterprise Linux AI, Cluster Observability Operator, Red Hat OpenShift Builds, Red Hat OpenShift GitOps, Multicluster Global Hub, golang.org/x/net/html, Cert Manager support for Red Hat OpenShift release, Logging for Red Hat OpenShift, Logging subsystem for Red Hat OpenShift, Red Hat Advanced Cluster Security for Kubernetes, Red Hat Migration Toolkit for Containers, Red Hat Migration Toolkit for Applications, Red Hat multicluster global hub, Red Hat OpenShift Workload Availability, Red Hat OpenShift distributed tracing, Streams for Apache Kafka, Red Hat OpenShift Service Mesh, Red Hat Web Terminal",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Red Hat, Inc. Red Hat Enterprise Linux 7 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 9 , Canonical Ltd. Ubuntu 18.04 LTS , Red Hat, Inc. Red Hat Enterprise Linux 8 , Canonical Ltd. Ubuntu 20.04 LTS , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 11 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 12 , \u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb \u0420\u0415\u0414 \u041e\u0421 7.3  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751), Red Hat, Inc. Red Hat Enterprise Linux 9 , Red Hat, Inc. Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support , Red Hat, Inc. Red Hat Enterprise Linux 7 Extended Lifecycle Support , Red Hat, Inc. Red Hat Enterprise Linux 10 , Red Hat, Inc. Red Hat Enterprise Linux 8.8 Telecommunications Update Service , Red Hat, Inc. Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions , Red Hat, Inc. Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 13 , Red Hat, Inc. Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On , Red Hat, Inc. Red Hat Enterprise Linux 9.6 Extended Update Support , \u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb \u0420\u0415\u0414 \u041e\u0421 8.0  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751), Red Hat, Inc. Red Hat Enterprise Linux 10.0 Extended Update Support , Red Hat, Inc. Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions , Red Hat, Inc. Red Hat Enterprise Linux AI 3.4 ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u0430 golang-x-net \u044f\u0437\u044b\u043a\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Golang, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u044d\u043a\u0432\u0438\u0432\u0430\u043b\u0435\u043d\u0442\u043d\u043e\u0441\u0442\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u044d\u043a\u0432\u0438\u0432\u0430\u043b\u0435\u043d\u0442\u043d\u043e\u0441\u0442\u0438 \u0432\u043e \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-1289)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u0430 golang-x-net \u044f\u0437\u044b\u043a\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Golang \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u044d\u043a\u0432\u0438\u0432\u0430\u043b\u0435\u043d\u0442\u043d\u043e\u0441\u0442\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821\nhttps://github.com/advisories/GHSA-w2q5-6q6x-x959\nhttps://access.redhat.com/security/cve/CVE-2026-39821\nhttps://bugzilla.redhat.com/show_bug.cgi?id=2480756\nhttps://go.dev/cl/767220\nhttps://go.dev/issue/78760\nhttps://groups.google.com/g/golang-announce/c/94pEornpRlI\nhttps://groups.google.com/g/golang-announce/c/iI-mYSI0lu8\nhttps://pkg.go.dev/vuln/GO-2026-5026\nhttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39821.json\nhttps://redos.red-soft.ru/support/secure/\nhttps://security-tracker.debian.org/tracker/CVE-2026-39821\nhttps://deb.freexian.com/extended-lts/tracker/CVE-2026-39821\nhttps://ubuntu.com/security/CVE-2026-39821",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438/\u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u0421\u0435\u0442\u0435\u0432\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e, \u0421\u0435\u0442\u0435\u0432\u043e\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-1289",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,6)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,2)"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.