CLEANSTART-2026-LL86841 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

🗓️ 08 Sep 2026 00:42:44Reported by GoogleType

osv_cleanstart🔗 osv.dev👁 20 Views

source-address enforcement gap in opentelemetry-collector auth callbacks, extending CVE-2026-46595.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for September 2026	19 Oct 202616:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple secuirty vulnerabilities addressed with IBM Business Automation Workflow containers October 2026	31 Oct 202609:36	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	27 Oct 202618:37	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in golang affects IBM Netezza Appliance	12 Aug 202608:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera Enterprise Webapps	8 Oct 202622:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CloudPak for Data Scheduling Service is vulnerable to CVE-2026-84304.	21 Oct 202618:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is susceptible to vulnerabilities due to Golang library related to ObjectAgent(CVE-2026-39824).	31 Jul 202620:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera HTTP Gateway	16 Jun 202621:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.	3 Nov 202620:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CloudPak for Data Scheduling Service is vulnerable to CVE-2026-84303 and CVE-2026-84304	21 Oct 202618:36	–	ibm

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-LL86841.json
osv	www.osv.dev/vulnerability/CVE-2026-39824
osv	www.osv.dev/vulnerability/CVE-2026-56854
osv	www.osv.dev/vulnerability/CVE-2026-84304
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-39824
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-56854
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-84304

18 Sep 2026 12:17Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.19.8

EPSS0.00609

opentelemetry-collector source-address authentication callback enforcement gap PublicKeyCallback CVE-2026-46595