CVE-2026-27140

Go toolchain cmd/go

Medium priority: severe, but no known exploitation

SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass.

In the news

• Múltiples vulnerabilidades en productos de Splunk · INCIBE-CERT