Klever-Go KVM read-only execution can commit contract delete and upgrade side effects

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-46403 · Microsoft / collected KEV context

EUVD-2026-46390

GHSA-jc6w-wmfc-fh33

GO-2026-5461

cve-program · CVE-2026-46403

• https://github.com/klever-io/klever-go/security/advisories/GHSA-jc6w-wmfc-fh33
• https://github.com/klever-io/klever-go/commit/333f6ec910906e227705fc5767dc897d8fbfc862
• https://github.com/klever-io/klever-go/commit/68b94a40824fac2d848a4ded6eb7c91ada6ce9ef

euvd · EUVD-2026-46390

• https://github.com/klever-io/klever-go/security/advisories/GHSA-jc6w-wmfc-fh33
• https://github.com/klever-io/klever-go/commit/333f6ec910906e227705fc5767dc897d8fbfc862
• https://github.com/klever-io/klever-go/commit/68b94a40824fac2d848a4ded6eb7c91ada6ce9ef

nvd · CVE-2026-46403

• https://github.com/klever-io/klever-go/commit/333f6ec910906e227705fc5767dc897d8fbfc862
• https://github.com/klever-io/klever-go/commit/68b94a40824fac2d848a4ded6eb7c91ada6ce9ef
• https://github.com/klever-io/klever-go/security/advisories/GHSA-jc6w-wmfc-fh33

osv · GHSA-jc6w-wmfc-fh33

• https://github.com/klever-io/klever-go/security/advisories/GHSA-jc6w-wmfc-fh33
• https://github.com/klever-io/klever-go/commit/333f6ec910906e227705fc5767dc897d8fbfc862
• https://github.com/klever-io/klever-go/commit/68b94a40824fac2d848a4ded6eb7c91ada6ce9ef
• https://github.com/klever-io/klever-go

osv · GO-2026-5461

• https://github.com/klever-io/klever-go/security/advisories/GHSA-jc6w-wmfc-fh33
• https://github.com/klever-io/klever-go/commit/333f6ec910906e227705fc5767dc897d8fbfc862
• https://github.com/klever-io/klever-go/commit/68b94a40824fac2d848a4ded6eb7c91ada6ce9ef

No related operational record is retained in the current change model.