A vulnerability was found in an unknown product, potentially allowing a passive network observer to de-anonymize handshakes that used Encrypted Client Hello due to the disclosure of pre-shared key identities in the unencrypted client hello. The vulnerability affects systems utilizing Encrypted Client Hello handshakes. Security teams should review the vulnerability details and assess the potential impact o [truncated]
CVE-2026-39822 is a HIGH severity vulnerability in Go, with a CVSS score of 7.8. The vulnerability occurs on Unix systems when opening a file in an os.Root, improperly following symlinks to locations outside of the Root when the final path component of a path is a symbolic link and the path ends in /. This issue can lead to unauthorized access to sensitive data or execution of malicious code if exploited. [truncated]
