{"vulnerability": "CVE-2026-39831", "sightings": [{"uuid": "06ce3ba4-ce58-4cef-839f-14fb72d62c1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39831", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmp34s6rls2e", "content": "#openSUSE Tumbleweed just dropped mcphost 0.34.0-5.1 \u2013 fixes 5 CVEs including a FIDO SSH key bypass (CVE-2026-39831). Read more -> tinyurl.com/48a52xb4", "creation_timestamp": "2026-05-25T18:09:02.599954Z"}, {"uuid": "18ed88d0-5293-4245-9807-4370a45dedaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39831", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmp34ybf522e", "content": "#openSUSE Tumbleweed just dropped mcphost 0.34.0-5.1 \u2013 fixes 5 CVEs including a FIDO SSH key bypass (CVE-2026-39831). Read more -> tinyurl.com/48a52xb4", "creation_timestamp": "2026-05-25T18:09:03.171453Z"}, {"uuid": "04d53b28-9192-44fc-afdd-e2b20daf0d00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39831", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmp34ybi2s2e", "content": "#openSUSE Tumbleweed just dropped mcphost 0.34.0-5.1 \u2013 fixes 5 CVEs including a FIDO SSH key bypass (CVE-2026-39831). Read more -> tinyurl.com/48a52xb4", "creation_timestamp": "2026-05-25T18:09:03.687374Z"}, {"uuid": "996249f6-9e53-4d24-945b-158f3cff2913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39831", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mqp5ww6arr2m", "content": "Yes Critical (9.1) CVE-2026-39831 Yes Yes Yes Yes Critical (9.1) CVE-2026-39832 Yes Yes Yes Yes Critical (9.1) CVE-2026-39833 Yes Yes Yes Yes Critical (9.1) CVE-2026-39834 Yes Yes Yes Yes Critical (9.1) CVE-2026-42496 Yes Yes No Yes Medium (9.1) CVE-2026-42508 Yes Yes Yes", "creation_timestamp": "2026-07-15T16:40:08.243461Z"}, {"uuid": "906aae73-0781-4352-a733-030c05036b3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39831", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mulqwod7ca2t", "content": "CVE-2026-39831 - golang-go.crypto\nThe golang.org/x/crypto/ssh library allows FIDO/U2F security keys to be used without the user's physical presence, which bypasses the security key's intended\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#canonical #UbuntuPro1604LTS #CVE #infosec", "creation_timestamp": "2026-09-03T05:50:06.421159Z"}]}