Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Verify() method for FIDO/U2F security key types ([email protected], [email protected]) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a "no-touch-required" extension in Permissions.Extensions from PublicKeyCallback.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🔴 golangorg/x/#crypto/ssh, Authentication Bypass, #CVE-2026-39831 (Critical) -DC-Jun2026-660 https://dailycve.com/golangorg-x-crypto-ssh-authentication-bypass-cve-2026-39831-critical-dc-jun2026-660/
Post summary
A new critical authentication bypass vulnerability (CVE‑2026‑39831) was disclosed for golang.org/x/crypto/ssh, as reported on DailyCVE.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | golang | crypto | - | go | - |