Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The "go bug" command writes to two files with predictable names in the system temporary directory (for example, "/tmp"). An attacker with access to the temporary directory can create a symlink in one of these names, causing "go bug" to overwrite the target of the symlink.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-39819 Symlink-Based Arbitrary File Overwrite in Go Bug Command via Temp Directory https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-39819
Post summary
The text mentions CVE-2026‑39819, identifying it as a symlink-based arbitrary file overwrite in Go’s bug command via the temp directory, but provides no PoC, exploit details, active exploitation, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | golang | go | - | - | - |