CLEANSTART-2026-LL86841 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

🗓️ 08 Sep 2026 00:42:44Reported by GoogleType

osv_cleanstart🔗 osv.dev👁 14 Views

source-address enforcement gap in opentelemetry-collector auth callbacks, extending CVE-2026-46595.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin:Vulnerability in golang affects IBM Netezza Appliance	12 Aug 202608:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera Enterprise Webapps	8 Oct 202622:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is susceptible to vulnerabilities due to Golang library related to ObjectAgent(CVE-2026-39824).	31 Jul 202620:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera HTTP Gateway	16 Jun 202621:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)	5 Aug 202613:18	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in golang.org/x/crypto	5 Oct 202614:04	–	ibm
IBM Security Bulletins	Security Bulletin: Improper input validation, integer overflow, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	17 Aug 202615:41	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerabilities exists in Golang package used by IBM Netezza Appliance	12 Oct 202608:12	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (Yosemite 2.0)	8 Sep 202614:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses golang.org/x/sys-v0.38.0 which is vulnerable to CVE-2026-39824.	4 Aug 202612:21	–	ibm

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-LL86841.json
osv	www.osv.dev/vulnerability/CVE-2026-39824
osv	www.osv.dev/vulnerability/CVE-2026-56854
osv	www.osv.dev/vulnerability/CVE-2026-84304
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-39824
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-56854
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-84304

18 Sep 2026 12:17Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19.8

EPSS0.00609

opentelemetry-collector source-address authentication callback enforcement gap PublicKeyCallback CVE-2026-46595