CVE WATCH / VULNERABILITY DETAIL
CVE-2026-82509
HIGHCVSS 7.4NVD feed
Published 10 November 2026 · tracked since 11 November 2026
Description
V programming language standard library net.http through version 0.5.2 prior to commit 4077484 contains a TLS certificate validation bypass vulnerability that allows on-path attackers to intercept HTTPS traffic by exploiting the default false value of SSLConnectConfig.validate and FetchConfig.valida
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-125754 HIGH 7.1
- CVE-2026-125753 MEDIUM 5.9
- CVE-2026-125747 MEDIUM 5.4
- CVE-2026-124038 LOW 2.3
- CVE-2026-123181 MEDIUM 5.5
- CVE-2026-123179 MEDIUM 5.5
- CVE-2026-121683 CRITICAL 9.4
- CVE-2026-121653 CRITICAL 9.8
- CVE-2026-111256
- CVE-2026-111250