PatchRadar

← Browse

CVE-2026-42499

Medium

Elevated severity or exploit probability.

CVSS base
7.5 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS — probability of exploitation (30 days)
0.8%
54.9th percentile
CISA KEV
Not listed
Weakness / dates
CWE-1046
Published 2026-05-07 · modified 2026-09-18

CVSS breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack VectorNNetwork
Attack ComplexityLLow
Privileges RequiredNNone
User InteractionNNone
ScopeUUnchanged
ConfidentialityNNone
IntegrityNNone
AvailabilityHHigh

Timeline

Description

Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.

Affected

golang

References

Official: NVD · CVE.org