{"vulnerability": "CVE-2026-46595", "sightings": [{"uuid": "44e7fbbf-ac1c-4bf7-913b-65e15393c38e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46595", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmgc4lusjl2k", "content": "CVE-2026-46595 - Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh\nCVE ID : CVE-2026-46595\n \n Published : May 22, 2026, 4:16 a.m. | 1\u00a0hour, 34\u00a0minutes ago\n \n Description : Previously, CVE-2024-45337 fixed an authorization bypass for mis...", "creation_timestamp": "2026-05-22T06:20:07.197203Z"}, {"uuid": "b8a55831-abb4-4c76-8232-0830d8cf5ea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46595", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mqp5wvyuvz2h", "content": "Patch 1.29.5-asm.12 contains fixes for the following platform CVEs: CVE Proxy Control Plane Distroless CNI Severity CVE-2026-46595 Yes Yes Yes Yes Critical (10.0) CVE-2026-8376 Yes Yes No Yes Medium (9.8) CVE-2026-8925 Yes Yes No Yes Medium (9.8) CVE-2026-39830 Yes Yes Yes", "creation_timestamp": "2026-07-15T16:40:07.639939Z"}, {"uuid": "f686d777-2964-4b7d-94ac-114b669242bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46595", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mulsmbhg5n2y", "content": "CVE-2026-46595 - golang-go.crypto\nA security check is bypassed in Go SSH servers when using an incorrect authentication method. This allows unauthorized access to the server. To fix this, update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#canonical #UbuntuPro2004LTS #CVE #infosec", "creation_timestamp": "2026-09-03T06:20:04.673265Z"}]}