PT-2026-42829 · Cleanstart+4 · Argo Workflows+38

Neild · Published 2026-05-22 · Updated 2026-06-11 · CVE-2026-39824

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description The NewNTUnicodeString() function does not check for string length overflow. When provided with a string that exceeds the maximum size of a NTUnicodeString (a 16-bit number of bytes), the function returns a truncated string instead of generating an error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CLEANSTART-2026-BA41349

CLEANSTART-2026-BP69037

CLEANSTART-2026-BX78383

CLEANSTART-2026-CL67452

CLEANSTART-2026-CN27900

CLEANSTART-2026-CP01923

CLEANSTART-2026-CP20786

CLEANSTART-2026-DX24417

CLEANSTART-2026-EA12165

CLEANSTART-2026-EG39405

CLEANSTART-2026-EU52554

CLEANSTART-2026-FA38569

CLEANSTART-2026-FD47409

CLEANSTART-2026-FP26400

CLEANSTART-2026-GM77447

CLEANSTART-2026-IH16568

CLEANSTART-2026-JY65496

CLEANSTART-2026-KJ72865

CLEANSTART-2026-MC76610

CLEANSTART-2026-MO16862

CLEANSTART-2026-MR08661

CLEANSTART-2026-MR40751

CLEANSTART-2026-MZ00063

CLEANSTART-2026-MZ81553

CLEANSTART-2026-NT30039

CLEANSTART-2026-NU38786

CLEANSTART-2026-QN97697

CLEANSTART-2026-RE02723

CLEANSTART-2026-RG22668

CLEANSTART-2026-RQ86436

CLEANSTART-2026-SF49994

CLEANSTART-2026-SV92564

CLEANSTART-2026-UC73978

CLEANSTART-2026-UK19445

CLEANSTART-2026-VD47610

CLEANSTART-2026-VO11205

CLEANSTART-2026-VX15911

CLEANSTART-2026-WA48911

CLEANSTART-2026-WS85269

CLEANSTART-2026-XC13942

CLEANSTART-2026-XE66300

CLEANSTART-2026-XV65906

CLEANSTART-2026-YG71543

CLEANSTART-2026-YK91867

CLEANSTART-2026-YS01805

CLEANSTART-2026-YY48565

CVE-2026-39824

GO-2026-5024

OPENSUSE-SU-2026:10856-1

Affected Products

Argo Workflows

Cadvisor

Cert-Manager

Configmap-Reload

Cortex

Elastic-Beats

Golang-Golang-X-Sys

Golang.Org/X/Sys

Golang.Org/X/Sys/Windows

Google-Guest-Agent

Gostatsd

Gosu

Helm-Operator

Ingress-Nginx-Controller-1.14

Ingress-Nginx-Controller-1.15

Istio

Kube-State-Metrics

Kubernetes-Csi-External-Provisioner-Fips

Kubernetes-Csi-External-Snapshotter-Fips

Kubernetes-Csi-Livenessprobe-Fips

Libnvidia-Container

Logstash-Exporter

Memcached-Exporter

Metallb

Minio

Mongodb

Mountpoint-S3-Csi-Driver

Nats-Streaming

Newrelic-Prometheus-Configurator

Nvidia Container Toolkit

Opentelemetry-Collector-Contrib

Percona-Server-Mongodb-Operator

Rclone

Spice-Server

Spire-Server-Fips

Trino

Vault

Velero-Plugin-For-Csi

Wait-For-Port

References · 472

• https://nvd.nist.gov/vuln/detail/CVE-2026-39834 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-22871 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-XC13942 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-VX15911 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61726 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-42578 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-41417 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-45536 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-58183 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-27140 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-42506 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-33811 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-27136 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-FA38569 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61730 · Security Note