CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.3. See the original NVD description below for full technical details.
CVE
CVE-2026-39835
Severity
MEDIUM
CVSS
5.3
EPSS
0.50%
Original NVD Description
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.
Related CVEs
Other vulnerabilities affecting the same vendor(s)