CVE-2026-39835
CVE Details
Visit the official vulnerability details page for CVE-2026-39835 to learn more.
Initial Publication
05/22/2026
Last Update
07/13/2026
Third Party Dependency
golang.org/x/crypto
NIST CVE Summary
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.
CVE Severity
Our Official Summary
Investigation is ongoing to determine how this vulnerability affects our products.
Status
Modified
Affected Products & Versions
| Version | PaletteAI | PaletteAI VerteX |
|---|---|---|
| 1.1.8 | ⚠️ Impacted | ⚠️ Impacted |
Revision History
No revisions available.