CVE-2026-39829Disclosure(golang / crypto)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public key authentication. RSA moduli are now limited to 8192 bits, and DSA parameters are validated per FIPS 186-2.

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-347CWE-1284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • crypto

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
Products
crypto

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-26: 1Technical Details · 2026-06-26: 106-26
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
Full discourse1 post
  • DailyCVE@dailycve
    Disclosure

    🔴 golangorg/x/#crypto/ssh, Denial of Service (DoS), #CVE-2026-39829 (High Severity) -DC-Jun2026-665 https://dailycve.com/golangorg-x-crypto-ssh-denial-of-service-dos-cve-2026-39829-high-severity-dc-jun2026-665/

    Post summary

    The text announces a high‑severity DoS vulnerability in golangorg/x/crypto/ssh (CVE‑2026‑39829) with no evidence of current exploitation or mitigation, merely reporting the discovery.

    0001077
    216 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appgolangcrypto-go-

Explore more