Linuxsecurity Certificate Authority Vulnerability in Go 1.26 and 1.27 Updates
Article Content
- •CVE-2026-111943 poses a critical risk with a CVSS score of 9.1.
- •Updates for Go 1.26 and 1.27 were released on October 22, 2026.
- •Administrators are urged to apply patches immediately to prevent exploitation.
SUSE has released updates for Go versions 1.26 and 1.27 addressing vulnerabilities, including CVE-2026-111943, which involves security concerns with a specific Certificate Authority. This flaw allows potential exploitation without authentication, affecting multiple SUSE and openSUSE products. The updates were published on October 22, 2026, with a proof-of-concept (PoC) available shortly after. The vulnerabilities could lead to unauthorized code execution, posing a significant risk to systems using affected versions. Administrators are urged to apply the patches immediately to mitigate risks. The severity of CVE-2026-111943 is rated as with a CVSS score of 9.1. Other vulnerabilities, CVE-2026-78663 and CVE-2026-78669, also received updates but are rated lower in severity.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track OpenSUSE and CVE-2026-111943 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Which versions are affected?
Is there a proof-of-concept available?
What should we do to mitigate this vulnerability?
Continue Reading
Critical PHP Vulnerabilities Exploited Before Public Disclosure Two critical vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, were exploited before their public disclosure on October 21, 2026. Amazon Threat Intelligence reported that attempts to exploit these vulnerabilities began on October 17, 2026, targeting its MadPot honeypot network. Both… 
Critical Java Flaw Exposes eMudhra CA Certificates Oracle released an emergency fix for a critical vulnerability, CVE-2026-91403, affecting Java SE and GraalVM due to eight compromised eMudhra intermediate CA certificates. The flaw, rated critical with a CVSS score of 9.1, allows unauthenticated attackers to exploit the Java Secure Socket Extension (JSSE) component…