CVE-2026-39828

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

June 15, 2026

Last Seen

October 6, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Auth Bypass Vulnerability in SUSE Elemental Systems (CVE-2026-33186)74.0

A significant authorization bypass vulnerability (CVE-2026-33186) has been identified in multiple SUSE Elemental systems, including the elemental-system-agent, elemental-toolkit, and elemental-register. This flaw arises from improper validation of the HTTP/2 path pseudo-header, allowing unauthorized...

Fedora Caddy Security Updates Address Multiple CVEs74.0

On June 23, 2026, Fedora released critical security updates for Caddy, addressing 22 CVEs in Fedora 43 and 17 CVEs in Fedora 44. The vulnerabilities include privilege escalation, information disclosure, and denial of service. Key CVEs include CVE-2026-27585, CVE-2026-30851, and CVE-2026-40097, which...

Critical Vulnerabilities in Fedora SSH Component Expose Users to Command Execution Risks72.8

Fedora has released updates addressing two critical vulnerabilities in the opkssh component, identified as CVE-2026-39828 and CVE-2026-39830. Both vulnerabilities were published on May 22, 2026, and affect users of Fedora 43 and 44. CVE-2026-39828 allows unauthorized command execution due to imprope...

Critical Vulnerabilities in Fedora Docker-Buildx and Buildkit72.8

Fedora has released updates addressing critical vulnerabilities in docker-buildx and docker-buildkit. CVE-2026-39828 allows unauthorized command execution via discarded SSH permissions, while CVE-2026-39829 enables denial of service through crafted public keys. Both vulnerabilities were published on...