# CVE-2026-25679

## Summary

- **CVE ID:** CVE-2026-25679
- **Severity:** HIGH
- **CVSS Score:** 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- **CWE:** N/A
- **Published:** Mar 6, 2026
- **Last Modified:** Sep 18, 2026

## Description

url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.

## Affected Products

- Go standard library — net/url (0)
- Go standard library — net/url (1.26.0-0)

## References

- [CNA](https://go.dev/cl/752180)
- [CNA](https://go.dev/issue/77578)
- [CNA](https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk)
- [CNA](https://pkg.go.dev/vuln/GO-2026-4601)
- [redhat-SADP](https://access.redhat.com/security/cve/CVE-2026-25679)
- [redhat-SADP](https://bugzilla.redhat.com/show_bug.cgi?id=2445356)
- [redhat-SADP](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25679.json)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:13508)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8855)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:13512)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:26527)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:26541)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:25043)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:21655)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:25180)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:27076)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:6341)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:28047)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:14868)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8314)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:9435)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8856)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:5943)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:10133)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8849)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8931)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:17084)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19719)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19750)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:17040)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:7328)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:10929)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:16696)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:11375)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:10701)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8842)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:7005)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8840)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:5941)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:7992)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:6344)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:6388)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:13642)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:13643)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:7669)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:10169)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:11413)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:11412)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19032)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:29195)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19133)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19022)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19027)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19026)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22937)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19049)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19135)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22450)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19017)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:24386)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19055)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19132)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19031)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:29035)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19126)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19128)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:6949)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:16875)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:7011)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:7009)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8456)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:7674)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:7878)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8853)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:7879)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:20581)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:9043)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:9094)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8434)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19634)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:7876)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:20582)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8860)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:9093)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8851)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:7877)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:20584)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8877)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8878)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:9695)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:16102)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:9436)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:7883)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8881)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8949)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8852)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:25252)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:25251)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:9434)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:7833)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8879)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:9090)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:25248)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8322)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:25253)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:25250)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22733)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:12030)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:12032)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:10712)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:7834)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8930)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8882)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:12033)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19721)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:12028)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8324)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:12031)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:12029)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:11749)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:9109)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:9439)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8848)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:5944)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8847)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8845)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:9108)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19720)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19475)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:17287)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:7665)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:9097)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:9098)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:7259)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8841)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:5942)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:6382)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:6383)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:13671)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:9044)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:7315)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:29455)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:29703)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19350)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19181)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19185)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19184)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:23228)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19353)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22714)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:26445)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19207)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:29702)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:26636)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:9872)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:26585)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:11800)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22862)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22423)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22347)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:5110)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:21769)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:23345)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:16874)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:29854)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:26568)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8433)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22627)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:25127)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8151)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:13829)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:20889)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:11217)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:13791)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:13545)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:9742)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:6802)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:10140)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:10141)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:7385)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:7291)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:9052)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:10184)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:5549)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:10158)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:12282)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:21696)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:14100)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:21691)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:15091)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:14774)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:20088)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:17598)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:21657)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:20041)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:6564)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:10175)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:11688)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8483)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:11686)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:9440)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8484)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:9448)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8490)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:9453)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8491)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:9461)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8493)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:9385)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:14020)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:11747)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:6720)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:11856)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:21017)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:24853)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:19375)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:11916)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:11996)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:14879)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:10125)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:10065)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:11768)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:10250)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:10225)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8338)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8337)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:8167)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:28441)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:33722)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:28886)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:34365)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:28893)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:28961)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:36317)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:36319)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:34097)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:36796)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:36651)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:39810)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:40118)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:41019)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:40945)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42150)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42151)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:41928)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:48036)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:49944)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:51288)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:52390)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:52391)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:52389)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54191)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54757)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56785)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56910)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56852)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:57482)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:59830)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:60018)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:66401)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:65838)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.73%
- **EPSS Percentile:** 52.5

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-18._