RHSA-2026:66561: golang1.27 Red Hat

Published

Published 22-09-2026Last modified 20-10-2026

Vulnerability summary

RHSA-2026:66561 is a high (CVSS 8.1) vulnerability in golang1.27 Red Hat.

Overall risk

32/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.1/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 9 · Downstream 0 · Related 9

CVE-2026-27136 CVE-2026-39817 CVE-2026-39819 CVE-2026-39827 CVE-2026-39834 CVE-2026-39835+3 more

Timeline

22-09-2026
PublishedVulnerability first disclosed.
20-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

CVSS metrics

1 score · 1 source · 1 version

v3.18.1

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat6 products

golang1.27< 0:1.27.1-0.1.hum1
golang1.27-bin< 0:1.27.1-0.1.hum1
golang1.27-docs< 0:1.27.1-0.1.hum1
golang1.27-misc< 0:1.27.1-0.1.hum1
golang1.27-src< 0:1.27.1-0.1.hum1

Show all 6

1 vendor · 6 products

References

71 links

Show all 71 references

access.redhat.com/security/cve/CVE-2026-39817REPORT
access.redhat.com/security/cve/CVE-2026-39819REPORT
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_66561.jsonAdvisory
bugzilla.redhat.com/show_bug.cgi?id=2480757REPORT
www.cve.org/CVERecord?id=CVE-2026-27136Advisory
nvd.nist.gov/vuln/detail/CVE-2026-27136Advisory
go.dev/cl/781685ARTICLE
go.dev/issue/79575ARTICLE
groups.google.com/g/golang-announce/c/iI-mYSI0lu8ARTICLE
pkg.go.dev/vuln/GO-2026-5030Advisory
bugzilla.redhat.com/show_bug.cgi?id=2467825REPORT
www.cve.org/CVERecord?id=CVE-2026-39817Advisory
nvd.nist.gov/vuln/detail/CVE-2026-39817Advisory
go.dev/cl/767520ARTICLE
go.dev/issue/78778ARTICLE
groups.google.com/g/golang-announce/c/qcCIEXso47MARTICLE
pkg.go.dev/vuln/GO-2026-4979Advisory
bugzilla.redhat.com/show_bug.cgi?id=2467813REPORT
www.cve.org/CVERecord?id=CVE-2026-39819Advisory
nvd.nist.gov/vuln/detail/CVE-2026-39819Advisory
go.dev/cl/763882ARTICLE
go.dev/issue/78584ARTICLE
pkg.go.dev/vuln/GO-2026-4978Advisory
bugzilla.redhat.com/show_bug.cgi?id=2480682REPORT
www.cve.org/CVERecord?id=CVE-2026-39827Advisory
nvd.nist.gov/vuln/detail/CVE-2026-39827Advisory
go.dev/cl/781320ARTICLE
go.dev/issue/35127ARTICLE
groups.google.com/g/golang-announce/c/a082jnz-LvIARTICLE
pkg.go.dev/vuln/GO-2026-5016Advisory
bugzilla.redhat.com/show_bug.cgi?id=2480676REPORT
www.cve.org/CVERecord?id=CVE-2026-39834Advisory
nvd.nist.gov/vuln/detail/CVE-2026-39834Advisory
go.dev/cl/781663ARTICLE
go.dev/issue/79567ARTICLE
pkg.go.dev/vuln/GO-2026-5020Advisory
bugzilla.redhat.com/show_bug.cgi?id=2480680REPORT
www.cve.org/CVERecord?id=CVE-2026-39835Advisory
nvd.nist.gov/vuln/detail/CVE-2026-39835Advisory
go.dev/cl/781660ARTICLE
go.dev/issue/79563ARTICLE
pkg.go.dev/vuln/GO-2026-5015Advisory
bugzilla.redhat.com/show_bug.cgi?id=2483431REPORT
www.cve.org/CVERecord?id=CVE-2026-42500Advisory
nvd.nist.gov/vuln/detail/CVE-2026-42500Advisory
go.dev/cl/781500ARTICLE
go.dev/issue/79576ARTICLE
groups.google.com/g/golang-announce/c/uhYX90BlBvIARTICLE
pkg.go.dev/vuln/GO-2026-5031Advisory
bugzilla.redhat.com/show_bug.cgi?id=2480762REPORT
www.cve.org/CVERecord?id=CVE-2026-42502Advisory
nvd.nist.gov/vuln/detail/CVE-2026-42502Advisory
go.dev/cl/781701ARTICLE
go.dev/issue/79572ARTICLE
pkg.go.dev/vuln/GO-2026-5027Advisory
bugzilla.redhat.com/show_bug.cgi?id=2480679REPORT
www.cve.org/CVERecord?id=CVE-2026-46598Advisory
nvd.nist.gov/vuln/detail/CVE-2026-46598Advisory
go.dev/cl/781360ARTICLE
go.dev/issue/79596ARTICLE
pkg.go.dev/vuln/GO-2026-5033Advisory