VDB

RHSA-2026:86029

RHSA-2026:86029 PUBLISHED CVSS 6.800000190734863 MEDIUM

A flaw was found in Go's crypto/x509 package. The certificate verification process fails to block trust in intermediate certificates associated with a compromised Certificate Authority (CA). A remote attacker presenting a certificate signed by these intermediate authorities can impersonate legitimate servers during secure connections. This flaw can enable an attacker to conduct a man-in-the-middle (MitM) attack to intercept or alter confidential communications.

Risk Scores

CVSS 3.1
6.800000190734863
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Affected Products

VendorProductVersions
Red Hatgolang1.27-docs-0:1.27.3-1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images1.27-docs-0:1.27.3-1.hum1
Red Hatgolang1.27-bin-0:1.27.3-1.hum1@s390x as a component of Red Hat Hardened Images1.27-bin-0:1.27.3-1.hum1
Red Hatgolang1.27-misc-0:1.27.3-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images1.27-misc-0:1.27.3-1.hum1
Red Hatgolang1.27-0:1.27.3-1.hum1@src as a component of Red Hat Hardened Images1.27-0:1.27.3-1.hum1
Red Hatgolang1.27-0:1.27.3-1.hum1@aarch64 as a component of Red Hat Hardened Images1.27-0:1.27.3-1.hum1
Red Hatgolang1.27-bin-0:1.27.3-1.hum1@aarch64 as a component of Red Hat Hardened Images1.27-bin-0:1.27.3-1.hum1
Red Hatgolang1.27-src-0:1.27.3-1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images1.27-src-0:1.27.3-1.hum1
Red Hatgolang1.27-tests-0:1.27.3-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images1.27-tests-0:1.27.3-1.hum1
Red Hatgolang1.27-bin-0:1.27.3-1.hum1@x86_64 as a component of Red Hat Hardened Images1.27-bin-0:1.27.3-1.hum1
Red Hatgolang1.27-0:1.27.3-1.hum1@x86_64 as a component of Red Hat Hardened Images1.27-0:1.27.3-1.hum1
Red Hatgolang1.27-tests-0:1.27.3-1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images1.27-tests-0:1.27.3-1.hum1
Red Hatgolang1.27-docs-0:1.27.3-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images1.27-docs-0:1.27.3-1.hum1
Red Hatgolang1.27-src-0:1.27.3-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images1.27-src-0:1.27.3-1.hum1
Red Hatgolang1.27-misc-0:1.27.3-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images1.27-misc-0:1.27.3-1.hum1
Red Hatgolang1.27-docs-0:1.27.3-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images1.27-docs-0:1.27.3-1.hum1
Red Hatgolang1.27-tests-0:1.27.3-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images1.27-tests-0:1.27.3-1.hum1
Red Hatgolang1.27-src-0:1.27.3-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images1.27-src-0:1.27.3-1.hum1
Red Hatgolang1.27-0:1.27.3-1.hum1@s390x as a component of Red Hat Hardened Images1.27-0:1.27.3-1.hum1
Red Hatgolang1.27-misc-0:1.27.3-1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images1.27-misc-0:1.27.3-1.hum1

Timeline

  • Oct 20, 2026 CVE Published
  • Oct 22, 2026 CVE Updated
  • Oct 22, 2026 Distribution Patch
  • Oct 22, 2026 Distribution Patch
  • Oct 22, 2026 Security Advisory
  • Oct 22, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›