Name: CVE-2026-39835: Improper Certificate Validation
Creator: Rapid7
Published: 2026-05-22T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2026-39835, CWE-295, CWE-476, CVSS 5.3, EPSS 0.00273

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

CVSS Details

CVSS 3.1 Base Score: 5.3
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade podman-catatonitUpgrade toolbox-testsUpgrade podmanUpgrade aardvark-dnsUpgrade udicaUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade python3-criuUpgrade skopeoUpgrade critUpgrade buildahUpgrade criuUpgrade toolboxUpgrade runcUpgrade podman-pluginsUpgrade podman-remoteUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hookUpgrade python3-podmanUpgrade podman-testsUpgrade netavarkUpgrade libslirp-develUpgrade buildah-testsUpgrade skopeo-testsUpgrade crunUpgrade cockpit-podmanUpgrade criu-libsUpgrade criu-develUpgrade libslirpUpgrade container-selinuxUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade conmonUpgrade podman-docker	Jul 13, 2026	Jul 9, 2026
Amazon Linux Ami 2	—	Upgrade runfinch-finchUpgrade nerdctl-debuginfoUpgrade amazon-cloudwatch-agentUpgrade containerd-debuginfoUpgrade nerdctlUpgrade containerdUpgrade amazon-ssm-agentUpgrade containerd-stress	Jun 9, 2026	Jun 9, 2026
Amazon_linux_2023	—	Upgrade containerd-debugsourceUpgrade containerd-stress-debuginfoUpgrade nerdctlUpgrade rcloneUpgrade containerdUpgrade amazon-cloudwatch-agentUpgrade rclone-debuginfoUpgrade rclone-debugsourceUpgrade runfinch-finchUpgrade containerd-debuginfoUpgrade containerd-stressUpgrade amazon-ssm-agent	Jun 9, 2026	May 22, 2026
Redhat Openshift	—	Upgrade openshift	Aug 17, 2026	May 22, 2026
Redhat_linux	—	No solution existsUpgrade slirp4netnsUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade conmonUpgrade buildah-debuginfoUpgrade podman-catatonit-debuginfoUpgrade crun-debugsourceUpgrade podman-dockerUpgrade flightctl-cliUpgrade skopeoUpgrade fuse-overlayfs-debugsourceUpgrade criuUpgrade buildah-tests-debuginfoUpgrade netavarkUpgrade python3-podmanUpgrade toolboxUpgrade buildahUpgrade conmon-debugsourceUpgrade criu-debuginfoUpgrade podman-tests-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade toolbox-testsUpgrade criu-libsUpgrade podmanUpgrade libslirpUpgrade flightctl-selinuxUpgrade fuse-overlayfs-debuginfoUpgrade aardvark-dnsUpgrade podman-catatonitUpgrade podman-testsUpgrade buildah-debugsourceUpgrade containers-commonUpgrade containernetworking-plugins-debugsourceUpgrade critUpgrade flightctl-servicesUpgrade container-selinuxUpgrade skopeo-testsUpgrade podman-debuginfoUpgrade criu-debugsourceUpgrade containernetworking-pluginsUpgrade podman-gvproxyUpgrade crunUpgrade python3-criuUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-remote-debuginfoUpgrade criu-libs-debuginfoUpgrade libslirp-develUpgrade slirp4netns-debugsourceUpgrade flightctl-observabilityUpgrade podman-debugsourceUpgrade podman-remoteUpgrade runc-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade crun-debuginfoUpgrade libslirp-debugsourceUpgrade criu-develUpgrade toolbox-debuginfoUpgrade toolbox-debugsourceUpgrade runcUpgrade podman-gvproxy-debuginfoUpgrade podman-plugins-debuginfoUpgrade libslirp-debuginfoUpgrade flightctl-agentUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmon-debuginfoUpgrade slirp4netns-debuginfoUpgrade cockpit-podmanUpgrade udicaUpgrade runc-debuginfo	Jul 9, 2026	May 22, 2026
Rocky_linux	—	Upgrade libslirp-develUpgrade buildah-debuginfoUpgrade crunUpgrade podman-gvproxyUpgrade runc-debuginfoUpgrade podman-debugsourceUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade slirp4netnsUpgrade podman-tests-debuginfoUpgrade podman-testsUpgrade buildahUpgrade conmon-debuginfoUpgrade libslirpUpgrade toolbox-testsUpgrade crun-debuginfoUpgrade buildah-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-plugins-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade conmonUpgrade netavarkUpgrade criu-libsUpgrade critUpgrade crun-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade buildah-debugsourceUpgrade libslirp-debuginfoUpgrade conmon-debugsourceUpgrade skopeoUpgrade podman-catatonit-debuginfoUpgrade containers-commonUpgrade python3-criuUpgrade criu-libs-debuginfoUpgrade podmanUpgrade runcUpgrade podman-pluginsUpgrade criu-develUpgrade toolboxUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade toolbox-debugsourceUpgrade slirp4netns-debuginfoUpgrade skopeo-testsUpgrade libslirp-debugsourceUpgrade toolbox-debuginfoUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade podman-debuginfoUpgrade runc-debugsourceUpgrade criuUpgrade criu-debugsourceUpgrade aardvark-dnsUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfs-debugsource	Jul 10, 2026	Jul 8, 2026

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence