CVE-2026-42501 | cmd-go up to 1.25.9/1.26.2 on Go signature verification (EUVD-2026-28433)
A vulnerability was found in cmd-go up to 1.25.9/1.26.2 on Go. It has been rated as problematic. Impacted is an unknown function. The manipulation leads to improper verification of cryptographic signature.
This vulnerability is traded as CVE-2026-42501. It is possible to initiate the attack remotely. There is no exploit available.
Upgrading the affected component is advised.VulDB Recent EntriesRead More