CVE-2026-25679

high

Description

url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.

References

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25679.json

https://pkg.go.dev/vuln/GO-2026-4601

https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk

https://go.dev/issue/77578

https://go.dev/cl/752180

https://bugzilla.redhat.com/show_bug.cgi?id=2445356

https://access.redhat.com/security/cve/CVE-2026-25679

https://access.redhat.com/errata/RHSA-2026:9872

https://access.redhat.com/errata/RHSA-2026:9742

https://access.redhat.com/errata/RHSA-2026:9695

https://access.redhat.com/errata/RHSA-2026:9461

https://access.redhat.com/errata/RHSA-2026:9453

https://access.redhat.com/errata/RHSA-2026:9448

https://access.redhat.com/errata/RHSA-2026:9440

https://access.redhat.com/errata/RHSA-2026:9439

https://access.redhat.com/errata/RHSA-2026:9436

https://access.redhat.com/errata/RHSA-2026:9435

https://access.redhat.com/errata/RHSA-2026:9434

https://access.redhat.com/errata/RHSA-2026:9385

https://access.redhat.com/errata/RHSA-2026:9109

https://access.redhat.com/errata/RHSA-2026:9108

https://access.redhat.com/errata/RHSA-2026:9098

https://access.redhat.com/errata/RHSA-2026:9097

https://access.redhat.com/errata/RHSA-2026:9094

https://access.redhat.com/errata/RHSA-2026:9093

https://access.redhat.com/errata/RHSA-2026:9090

https://access.redhat.com/errata/RHSA-2026:9052

https://access.redhat.com/errata/RHSA-2026:9044

https://access.redhat.com/errata/RHSA-2026:9043

https://access.redhat.com/errata/RHSA-2026:8949

https://access.redhat.com/errata/RHSA-2026:8931

https://access.redhat.com/errata/RHSA-2026:8930

https://access.redhat.com/errata/RHSA-2026:8882

https://access.redhat.com/errata/RHSA-2026:8881

https://access.redhat.com/errata/RHSA-2026:8879

https://access.redhat.com/errata/RHSA-2026:8878

https://access.redhat.com/errata/RHSA-2026:8877

https://access.redhat.com/errata/RHSA-2026:8860

https://access.redhat.com/errata/RHSA-2026:8856

https://access.redhat.com/errata/RHSA-2026:8855

https://access.redhat.com/errata/RHSA-2026:8853

https://access.redhat.com/errata/RHSA-2026:8852

https://access.redhat.com/errata/RHSA-2026:8851

https://access.redhat.com/errata/RHSA-2026:8849

https://access.redhat.com/errata/RHSA-2026:8848

https://access.redhat.com/errata/RHSA-2026:8847

https://access.redhat.com/errata/RHSA-2026:8845

https://access.redhat.com/errata/RHSA-2026:8842

https://access.redhat.com/errata/RHSA-2026:8841

https://access.redhat.com/errata/RHSA-2026:8840

https://access.redhat.com/errata/RHSA-2026:8493

https://access.redhat.com/errata/RHSA-2026:8491

https://access.redhat.com/errata/RHSA-2026:8490

https://access.redhat.com/errata/RHSA-2026:8484

https://access.redhat.com/errata/RHSA-2026:8483

https://access.redhat.com/errata/RHSA-2026:8456

https://access.redhat.com/errata/RHSA-2026:8434

https://access.redhat.com/errata/RHSA-2026:8433

https://access.redhat.com/errata/RHSA-2026:8338

https://access.redhat.com/errata/RHSA-2026:8337

https://access.redhat.com/errata/RHSA-2026:8324

https://access.redhat.com/errata/RHSA-2026:8322

https://access.redhat.com/errata/RHSA-2026:8314

https://access.redhat.com/errata/RHSA-2026:8167

https://access.redhat.com/errata/RHSA-2026:8151

https://access.redhat.com/errata/RHSA-2026:7992

https://access.redhat.com/errata/RHSA-2026:7883

https://access.redhat.com/errata/RHSA-2026:7879

https://access.redhat.com/errata/RHSA-2026:7878

https://access.redhat.com/errata/RHSA-2026:7877

https://access.redhat.com/errata/RHSA-2026:7876

https://access.redhat.com/errata/RHSA-2026:7834

https://access.redhat.com/errata/RHSA-2026:7833

https://access.redhat.com/errata/RHSA-2026:7674

https://access.redhat.com/errata/RHSA-2026:7669

https://access.redhat.com/errata/RHSA-2026:7665

https://access.redhat.com/errata/RHSA-2026:7385

https://access.redhat.com/errata/RHSA-2026:7328

https://access.redhat.com/errata/RHSA-2026:7315

https://access.redhat.com/errata/RHSA-2026:7291

https://access.redhat.com/errata/RHSA-2026:7259

https://access.redhat.com/errata/RHSA-2026:7011

https://access.redhat.com/errata/RHSA-2026:7009

https://access.redhat.com/errata/RHSA-2026:7005

https://access.redhat.com/errata/RHSA-2026:6949

https://access.redhat.com/errata/RHSA-2026:6802

https://access.redhat.com/errata/RHSA-2026:6720

https://access.redhat.com/errata/RHSA-2026:6564

https://access.redhat.com/errata/RHSA-2026:6388

https://access.redhat.com/errata/RHSA-2026:6383

https://access.redhat.com/errata/RHSA-2026:6382

https://access.redhat.com/errata/RHSA-2026:6344

https://access.redhat.com/errata/RHSA-2026:6341

https://access.redhat.com/errata/RHSA-2026:5944

https://access.redhat.com/errata/RHSA-2026:5943

https://access.redhat.com/errata/RHSA-2026:5942

https://access.redhat.com/errata/RHSA-2026:5941

https://access.redhat.com/errata/RHSA-2026:5549

https://access.redhat.com/errata/RHSA-2026:5110

https://access.redhat.com/errata/RHSA-2026:36796

https://access.redhat.com/errata/RHSA-2026:36651

https://access.redhat.com/errata/RHSA-2026:36319

https://access.redhat.com/errata/RHSA-2026:36317

https://access.redhat.com/errata/RHSA-2026:34365

https://access.redhat.com/errata/RHSA-2026:34097

https://access.redhat.com/errata/RHSA-2026:33722

https://access.redhat.com/errata/RHSA-2026:29854

https://access.redhat.com/errata/RHSA-2026:29703

https://access.redhat.com/errata/RHSA-2026:29702

https://access.redhat.com/errata/RHSA-2026:29455

https://access.redhat.com/errata/RHSA-2026:29195

https://access.redhat.com/errata/RHSA-2026:29035

https://access.redhat.com/errata/RHSA-2026:28961

https://access.redhat.com/errata/RHSA-2026:28893

https://access.redhat.com/errata/RHSA-2026:28886

https://access.redhat.com/errata/RHSA-2026:28441

https://access.redhat.com/errata/RHSA-2026:28047

https://access.redhat.com/errata/RHSA-2026:27076

https://access.redhat.com/errata/RHSA-2026:26636

https://access.redhat.com/errata/RHSA-2026:26585

https://access.redhat.com/errata/RHSA-2026:26568

https://access.redhat.com/errata/RHSA-2026:26541

https://access.redhat.com/errata/RHSA-2026:26527

https://access.redhat.com/errata/RHSA-2026:26445

https://access.redhat.com/errata/RHSA-2026:25253

https://access.redhat.com/errata/RHSA-2026:25252

https://access.redhat.com/errata/RHSA-2026:25251

https://access.redhat.com/errata/RHSA-2026:25250

https://access.redhat.com/errata/RHSA-2026:25248

https://access.redhat.com/errata/RHSA-2026:25180

https://access.redhat.com/errata/RHSA-2026:25127

https://access.redhat.com/errata/RHSA-2026:25043

https://access.redhat.com/errata/RHSA-2026:24853

https://access.redhat.com/errata/RHSA-2026:24386

https://access.redhat.com/errata/RHSA-2026:23345

https://access.redhat.com/errata/RHSA-2026:23228

https://access.redhat.com/errata/RHSA-2026:22937

https://access.redhat.com/errata/RHSA-2026:22862

https://access.redhat.com/errata/RHSA-2026:22733

https://access.redhat.com/errata/RHSA-2026:22714

https://access.redhat.com/errata/RHSA-2026:22627

https://access.redhat.com/errata/RHSA-2026:22450

https://access.redhat.com/errata/RHSA-2026:22423

https://access.redhat.com/errata/RHSA-2026:22347

https://access.redhat.com/errata/RHSA-2026:21769

https://access.redhat.com/errata/RHSA-2026:21696

https://access.redhat.com/errata/RHSA-2026:21691

https://access.redhat.com/errata/RHSA-2026:21657

https://access.redhat.com/errata/RHSA-2026:21655

https://access.redhat.com/errata/RHSA-2026:21017

https://access.redhat.com/errata/RHSA-2026:20889

https://access.redhat.com/errata/RHSA-2026:20584

https://access.redhat.com/errata/RHSA-2026:20582

https://access.redhat.com/errata/RHSA-2026:20581

https://access.redhat.com/errata/RHSA-2026:20088

https://access.redhat.com/errata/RHSA-2026:20041

https://access.redhat.com/errata/RHSA-2026:19750

https://access.redhat.com/errata/RHSA-2026:19721

https://access.redhat.com/errata/RHSA-2026:19720

https://access.redhat.com/errata/RHSA-2026:19719

https://access.redhat.com/errata/RHSA-2026:19634

https://access.redhat.com/errata/RHSA-2026:19475

https://access.redhat.com/errata/RHSA-2026:19375

https://access.redhat.com/errata/RHSA-2026:19353

https://access.redhat.com/errata/RHSA-2026:19350

https://access.redhat.com/errata/RHSA-2026:19207

https://access.redhat.com/errata/RHSA-2026:19185

https://access.redhat.com/errata/RHSA-2026:19184

https://access.redhat.com/errata/RHSA-2026:19181

https://access.redhat.com/errata/RHSA-2026:19135

https://access.redhat.com/errata/RHSA-2026:19133

https://access.redhat.com/errata/RHSA-2026:19132

https://access.redhat.com/errata/RHSA-2026:19128

https://access.redhat.com/errata/RHSA-2026:19126

https://access.redhat.com/errata/RHSA-2026:19055

https://access.redhat.com/errata/RHSA-2026:19049

https://access.redhat.com/errata/RHSA-2026:19032

https://access.redhat.com/errata/RHSA-2026:19031

https://access.redhat.com/errata/RHSA-2026:19027

https://access.redhat.com/errata/RHSA-2026:19026

https://access.redhat.com/errata/RHSA-2026:19022

https://access.redhat.com/errata/RHSA-2026:19017

https://access.redhat.com/errata/RHSA-2026:17598

https://access.redhat.com/errata/RHSA-2026:17287

https://access.redhat.com/errata/RHSA-2026:17084

https://access.redhat.com/errata/RHSA-2026:17040

https://access.redhat.com/errata/RHSA-2026:16875

https://access.redhat.com/errata/RHSA-2026:16874

https://access.redhat.com/errata/RHSA-2026:16696

https://access.redhat.com/errata/RHSA-2026:16102

https://access.redhat.com/errata/RHSA-2026:15091

https://access.redhat.com/errata/RHSA-2026:14879

https://access.redhat.com/errata/RHSA-2026:14868

https://access.redhat.com/errata/RHSA-2026:14774

https://access.redhat.com/errata/RHSA-2026:14100

https://access.redhat.com/errata/RHSA-2026:14020

https://access.redhat.com/errata/RHSA-2026:13829

Details

Source: Mitre, NVD

Published: 2026-03-06

Updated: 2026-07-10

Risk Information

CVSS v2

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Severity: High

EPSS

EPSS: 0.00035