Vulnerabilities
Report: CVE-2026-39831 - Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/c
CVE ID :CVE-2026-39831 Published : May 22, 2026, 4:16 a.m. | 59 minutes ago Description :The Verify() method for FIDO/U2F security key types ([email protected], [email protected]) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a