# CVE-2026-39820

## Summary

- **CVE ID:** CVE-2026-39820
- **Severity:** UNKNOWN
- **CVSS Score:** 0.04 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- **CWE:** N/A
- **Published:** May 7, 2026
- **Last Modified:** Sep 17, 2026

## Description

Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.

## Affected Products

- Go standard library — net/mail (0)
- Go standard library — net/mail (1.26.0-0)

## References

- [CNA](https://go.dev/issue/78566)
- [CNA](https://go.dev/cl/759940)
- [CNA](https://groups.google.com/g/golang-announce/c/qcCIEXso47M)
- [CNA](https://pkg.go.dev/vuln/GO-2026-4986)
- [redhat-SADP](https://access.redhat.com/security/cve/CVE-2026-39820)
- [redhat-SADP](https://bugzilla.redhat.com/show_bug.cgi?id=2467820)
- [redhat-SADP](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39820.json)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:33120)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:33123)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:33142)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:33150)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:33574)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:34364)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:36625)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:36319)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:36754)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:36797)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:23262)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:23264)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:40262)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:41031)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:41066)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:41928)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42644)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42146)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:43038)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42796)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:43692)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:43052)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:47952)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:50300)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:50205)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:50843)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:51033)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54287)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54285)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54283)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54284)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54286)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54274)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54531)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56340)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54583)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54602)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54552)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54883)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54555)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:57194)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:57845)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:57914)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:49702)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22120)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22112)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:57649)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:49712)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22121)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:59467)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56789)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56852)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:57482)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:57401)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56854)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:57487)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:60520)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:61253)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:62407)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:62406)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:62260)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:63022)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:62754)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:62753)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:62803)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:59833)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:59830)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:60018)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:60023)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:65335)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:65534)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:65116)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:65336)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:65886)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:65117)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:65153)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:66327)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:65895)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:66016)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:51112)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:66022)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:50319)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:50336)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:67517)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:68334)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:65838)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:67974)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:68504)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:68527)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:67975)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.78%
- **EPSS Percentile:** 54.3

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-17._