PT-2026-23663 · Mstdlib+1 · Stdlib+1

Jakub Ciolek · CVE-2026-27138 · Publicado 2026-03-06 · Atualizado 2026-07-30

Positive Technologies (AI Summary) · Pt

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Nome do Software Vulnerável e Versões Afetadas AWS Lambda (versões afetadas não especificadas)

Descrição Existe uma falha na qual a verificação de certificado pode levar à queda do programa. Isso ocorre quando um certificado dentro de uma cadeia não possui um nome DNS, enquanto outro certificado na mesma cadeia possui restrições de nome excluídas. Este problema afeta programas que verificam diretamente cadeias de certificados X.509 ou aqueles que utilizam TLS. O problema afeta 27 imagens base do Lambda que utilizam stdlib.

Recomendações No momento, não há informações sobre uma versão mais recente que contenha uma correção para esta vulnerabilidade.

Exploit

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

AZL-79610

AZL-79625

BDU:2026-04126

BIT-GOLANG-2026-27138

CLEANSTART-2026-AB43319

CLEANSTART-2026-AT12816

CLEANSTART-2026-BC17682

CLEANSTART-2026-BH97849

CLEANSTART-2026-EH36582

CLEANSTART-2026-FM44162

CLEANSTART-2026-FP26400

CLEANSTART-2026-GI67088

CLEANSTART-2026-GM63718

CLEANSTART-2026-GQ03231

CLEANSTART-2026-HA09227

CLEANSTART-2026-HJ72983

CLEANSTART-2026-HO16255

CLEANSTART-2026-HP74907

CLEANSTART-2026-IC13101

CLEANSTART-2026-JM96857

CLEANSTART-2026-JT42679

CLEANSTART-2026-JV11945

CLEANSTART-2026-KF61159

CLEANSTART-2026-KL41807

CLEANSTART-2026-KO23583

CLEANSTART-2026-KR58137

CLEANSTART-2026-KY82666

CLEANSTART-2026-LA67881

CLEANSTART-2026-LA96053

CLEANSTART-2026-LC57158

CLEANSTART-2026-LD38774

CLEANSTART-2026-LU57861

CLEANSTART-2026-MA49342

CLEANSTART-2026-MX70474

CLEANSTART-2026-OK95571

CLEANSTART-2026-ON62368

CLEANSTART-2026-PS51260

CLEANSTART-2026-PX55932

CLEANSTART-2026-QO29688

CLEANSTART-2026-QT53274

CLEANSTART-2026-RF77222

CLEANSTART-2026-RR25843

CLEANSTART-2026-RT37134

CLEANSTART-2026-RV11606

CLEANSTART-2026-RY70255

CLEANSTART-2026-SO86245

CLEANSTART-2026-SP88135

CLEANSTART-2026-SR26977

CLEANSTART-2026-TC31671

CLEANSTART-2026-TM31143

CLEANSTART-2026-UG20989

CLEANSTART-2026-UI21589

CLEANSTART-2026-UR38994

CLEANSTART-2026-UY60586

CLEANSTART-2026-VH00240

CLEANSTART-2026-VN16911

CLEANSTART-2026-WE55349

CLEANSTART-2026-WO16430

CLEANSTART-2026-XJ06210

CLEANSTART-2026-XN09779

CLEANSTART-2026-XP01012

CLEANSTART-2026-XP87197

CLEANSTART-2026-XR35583

CLEANSTART-2026-YB46455

CLEANSTART-2026-YN56551

CLEANSTART-2026-YS46680

CLEANSTART-2026-ZM74354

CLEANSTART-2026-ZU45532

CVE-2026-27138

GO-2026-4600

OPENSUSE-SU-2026:10299-1

OPENSUSE-SU-2026:10509-1

OPENSUSE-SU-2026:20342-1

OPENSUSE-SU-2026:20537-1

OPENSUSE-SU-2026:21483-1

RHSA-2026:7291

SUSE-SU-2026:0876-1

SUSE-SU-2026:0976-1

SUSE-SU-2026:0993-1

SUSE-SU-2026:1042-1

SUSE-SU-2026:21195-1

Produtos afetados

Aws-Lambda

Stdlib

Referências · 2186

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27138.json · Exploit
• https://github.com/golang/go/issues/77953 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-XR35583.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-LD38774.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-YS46680.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-YB46455.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-MA49342.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-QT53274.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-KO23583.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-RT37134.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-UR38994.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-ZM74354.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-ZU45532.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-YN56551.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-KL41807.json · Nota