What is RHSA-2026:16694?

RHSA-2026:16694 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: go-toolset:rhel8 security update

Which CVE IDs does RHSA-2026:16694 cover?

RHSA-2026:16694 covers the following CVE IDs: CVE-2026-27140. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2026:16694?

RHSA-2026:16694 has a CVSS v3 base score of 9.0, published by Red Hat Product Security.

Which products are affected by RHSA-2026:16694?

RHSA-2026:16694 affects 33 products, including: Red Hat Enterprise Linux AppStream E4S (v.8.8); Red Hat Enterprise Linux AppStream TUS (v.8.8); delve-0:1.9.1-1.module+el8.8.0+16778+5fbb74f5.src (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8); delve-0:1.9.1-1.module+el8.8.0+16778+5fbb74f5.src (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8); delve-0:1.9.1-1.module+el8.8.0+16778+5fbb74f5.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8); and others — see the full list on the advisory page.

RHSA-2026:16694HighCVSS 9.0

Red Hat Security Advisory: go-toolset:rhel8 security update

Vendor

Red Hat Product Security

Published

May 13, 2026

Last Modified

August 26, 2026

🔗 CVE IDs covered (1)

CVE-2026-27140 →

📋 Description

CVE-2026-27140 — cmd/go: golang: Go (golang) and cmd/go: Arbitrary Code Execution via malicious SWIG file names

🎯 Affected products33

Red Hat Enterprise Linux AppStream E4S (v.8.8)
Red Hat Enterprise Linux AppStream TUS (v.8.8)
delve-0:1.9.1-1.module+el8.8.0+16778+5fbb74f5.src (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
delve-0:1.9.1-1.module+el8.8.0+16778+5fbb74f5.src (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)
delve-0:1.9.1-1.module+el8.8.0+16778+5fbb74f5.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
delve-0:1.9.1-1.module+el8.8.0+16778+5fbb74f5.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)
delve-debuginfo-0:1.9.1-1.module+el8.8.0+16778+5fbb74f5.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
delve-debuginfo-0:1.9.1-1.module+el8.8.0+16778+5fbb74f5.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)
delve-debugsource-0:1.9.1-1.module+el8.8.0+16778+5fbb74f5.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
delve-debugsource-0:1.9.1-1.module+el8.8.0+16778+5fbb74f5.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)
go-toolset-0:1.19.13-4.module+el8.8.0+23976+18ba1869.ppc64le (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
go-toolset-0:1.19.13-4.module+el8.8.0+23976+18ba1869.src (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
go-toolset-0:1.19.13-4.module+el8.8.0+23976+18ba1869.src (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)
go-toolset-0:1.19.13-4.module+el8.8.0+23976+18ba1869.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
go-toolset-0:1.19.13-4.module+el8.8.0+23976+18ba1869.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)
golang-0:1.19.13-24.module+el8.8.0+24268+9f9e0e19.ppc64le (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
golang-0:1.19.13-24.module+el8.8.0+24268+9f9e0e19.src (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
golang-0:1.19.13-24.module+el8.8.0+24268+9f9e0e19.src (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)
golang-0:1.19.13-24.module+el8.8.0+24268+9f9e0e19.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
golang-0:1.19.13-24.module+el8.8.0+24268+9f9e0e19.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)
golang-bin-0:1.19.13-24.module+el8.8.0+24268+9f9e0e19.ppc64le (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
golang-bin-0:1.19.13-24.module+el8.8.0+24268+9f9e0e19.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
golang-bin-0:1.19.13-24.module+el8.8.0+24268+9f9e0e19.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)
golang-docs-0:1.19.13-24.module+el8.8.0+24268+9f9e0e19.noarch (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
golang-docs-0:1.19.13-24.module+el8.8.0+24268+9f9e0e19.noarch (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)
golang-misc-0:1.19.13-24.module+el8.8.0+24268+9f9e0e19.noarch (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
golang-misc-0:1.19.13-24.module+el8.8.0+24268+9f9e0e19.noarch (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)
golang-race-0:1.19.13-24.module+el8.8.0+24268+9f9e0e19.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
golang-race-0:1.19.13-24.module+el8.8.0+24268+9f9e0e19.x86_64 (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)
golang-src-0:1.19.13-24.module+el8.8.0+24268+9f9e0e19.noarch (go-toolset:rhel8) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)
+3 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products33

✅ Remediation

🔗 References (4)