Name: CVE-2026-39835: Improper Certificate Validation
Creator: Rapid7
Published: 2026-05-22T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2026-39835, CWE-295, CWE-476, CVSS 5.3, EPSS 0.00504

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

CVSS Details

CVSS 3.1 Base Score: 5.3
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade libslirp-develUpgrade buildah-testsUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade podman-dockerUpgrade python3-podmanUpgrade skopeo-testsUpgrade criu-develUpgrade libslirpUpgrade cockpit-podmanUpgrade criu-libsUpgrade container-selinuxUpgrade slirp4netnsUpgrade conmonUpgrade podman-testsUpgrade podman-gvproxyUpgrade netavarkUpgrade podmanUpgrade skopeoUpgrade podman-catatonitUpgrade buildahUpgrade podman-remoteUpgrade podman-pluginsUpgrade python3-criuUpgrade containernetworking-pluginsUpgrade toolboxUpgrade toolbox-testsUpgrade containers-commonUpgrade criuUpgrade runcUpgrade critUpgrade fuse-overlayfsUpgrade udicaUpgrade aardvark-dns	Jul 13, 2026	Jul 9, 2026
Amazon Linux Ami 2	—	Upgrade containerdUpgrade containerd-stressUpgrade amazon-ssm-agentUpgrade nerdctlUpgrade containerd-debuginfoUpgrade amazon-cloudwatch-agentUpgrade nerdctl-debuginfoUpgrade runfinch-finch	Jun 9, 2026	Jun 9, 2026
Amazon_linux_2023	—	Upgrade rcloneUpgrade nerdctlUpgrade containerd-debugsourceUpgrade containerd-stress-debuginfoUpgrade rclone-debuginfoUpgrade amazon-cloudwatch-agentUpgrade rclone-debugsourceUpgrade containerd-stressUpgrade containerdUpgrade runfinch-finchUpgrade containerd-debuginfoUpgrade amazon-ssm-agent	Jun 9, 2026	May 22, 2026
Redhat Openshift	—	Upgrade openshift	Aug 17, 2026	May 22, 2026
Redhat_linux	—	Upgrade buildahNo solution existsUpgrade python3-podmanUpgrade slirp4netnsUpgrade criu-debuginfoUpgrade podman-dockerUpgrade buildah-tests-debuginfoUpgrade podmanUpgrade toolbox-testsUpgrade criu-libsUpgrade criuUpgrade fuse-overlayfs-debuginfoUpgrade libslirpUpgrade crun-debugsourceUpgrade buildah-debugsourceUpgrade containers-commonUpgrade containernetworking-plugins-debugsourceUpgrade aardvark-dnsUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade conmon-debugsourceUpgrade podman-tests-debuginfoUpgrade conmonUpgrade flightctl-selinuxUpgrade podman-catatonitUpgrade podman-testsUpgrade toolboxUpgrade netavarkUpgrade buildah-testsUpgrade skopeoUpgrade flightctl-cliUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade podman-catatonit-debuginfoUpgrade podman-plugins-debuginfoUpgrade libslirp-debugsourceUpgrade podman-debuginfoUpgrade flightctl-agentUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-develUpgrade container-selinuxUpgrade slirp4netns-debuginfoUpgrade toolbox-debuginfoUpgrade udicaUpgrade containernetworking-pluginsUpgrade runcUpgrade podman-gvproxyUpgrade flightctl-servicesUpgrade criu-libs-debuginfoUpgrade libslirp-develUpgrade crunUpgrade criu-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-debugsourceUpgrade flightctl-observabilityUpgrade slirp4netns-debugsourceUpgrade cockpit-podmanUpgrade conmon-debuginfoUpgrade crun-debuginfoUpgrade libslirp-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-debugsourceUpgrade runc-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade critUpgrade podman-remoteUpgrade skopeo-testsUpgrade runc-debuginfo	Jul 9, 2026	May 22, 2026
Rocky_linux	—	Upgrade criu-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-plugins-debuginfoUpgrade crun-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade buildah-debuginfoUpgrade crunUpgrade libslirp-develUpgrade podman-tests-debuginfoUpgrade conmonUpgrade criu-libsUpgrade podman-gvproxyUpgrade buildahUpgrade slirp4netnsUpgrade buildah-tests-debuginfoUpgrade runc-debuginfoUpgrade libslirpUpgrade toolbox-testsUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade buildah-testsUpgrade netavarkUpgrade podman-debugsourceUpgrade conmon-debuginfoUpgrade podman-testsUpgrade crun-debugsourceUpgrade libslirp-debuginfoUpgrade podman-catatonit-debuginfoUpgrade conmon-debugsourceUpgrade criuUpgrade criu-debugsourceUpgrade skopeoUpgrade runc-debugsourceUpgrade podman-debuginfoUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade toolbox-debuginfoUpgrade criu-libs-debuginfoUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade toolboxUpgrade criu-develUpgrade podman-remoteUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade critUpgrade python3-criuUpgrade podman-pluginsUpgrade podmanUpgrade libslirp-debugsourceUpgrade containers-commonUpgrade runcUpgrade toolbox-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade slirp4netns-debuginfoUpgrade skopeo-testsUpgrade podman-remote-debuginfo	Jul 10, 2026	Jul 8, 2026

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence