# CVE-2026-42499 ## Summary - **CVE ID:** CVE-2026-42499 - **Severity:** UNKNOWN - **CVSS Score:** 0.04 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) - **CWE:** N/A - **Published:** May 7, 2026 - **Last Modified:** Sep 18, 2026 ## Description Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. ## Affected Products - Go standard library — net/mail (0) - Go standard library — net/mail (1.26.0-0) ## References - [CNA](https://go.dev/issue/78987) - [CNA](https://go.dev/cl/771520) - [CNA](https://groups.google.com/g/golang-announce/c/qcCIEXso47M) - [CNA](https://pkg.go.dev/vuln/GO-2026-4977) - [redhat-SADP](https://access.redhat.com/security/cve/CVE-2026-42499) - [redhat-SADP](https://bugzilla.redhat.com/show_bug.cgi?id=2467809) - [redhat-SADP](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42499.json) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:33120) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:33123) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:33142) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:33150) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:33574) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:34364) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:36625) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:36319) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:36754) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:36797) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:17713) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:17714) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:40262) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:41031) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:41066) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:41928) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42644) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42146) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:43038) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42796) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:43692) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:43052) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:47952) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:50300) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:50843) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:51033) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54287) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54285) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54283) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54284) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54286) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54274) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54531) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56340) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54583) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54602) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54552) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54555) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:57194) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:57845) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:57914) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:49702) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22120) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22112) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:57649) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:49712) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22121) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:59467) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56789) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56785) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56910) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56852) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:57482) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56912) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56854) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:57487) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:60520) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:61253) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:62407) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:62406) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:62260) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:63022) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:62754) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:62753) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:62803) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:59833) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:59830) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:60018) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:63332) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:63163) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:60023) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:63636) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:65335) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:65534) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:65116) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:64818) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:65336) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:65886) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:65117) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:65153) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:66327) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:65895) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:51112) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:66022) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:50319) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:50336) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:67148) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:67517) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:68334) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:65838) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:67974) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:68504) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:68527) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:67975) ## Exploitation Prediction (EPSS) - **EPSS Score:** 0.80% - **EPSS Percentile:** 54.7 --- _Exported from OnDuty AI Vulnerability Intelligence on 2026-09-18._