CVE-2026-81868Published
Steeltoe: Header-forwarded client cert lacks proof of private-key possession
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-81868 · Microsoft / collected KEV context
cve-program · CVE-2026-81868
- https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-5mq7-rwhj-4fh9
- https://github.com/SteeltoeOSS/Steeltoe/commit/b626ef3d60aaf19c68eeeed5ee81045406c8c6d0
- https://github.com/SteeltoeOSS/Steeltoe/releases/tag/4.3.0
euvd · EUVD-2026-81899
- https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-5mq7-rwhj-4fh9
- https://github.com/SteeltoeOSS/Steeltoe/commit/b626ef3d60aaf19c68eeeed5ee81045406c8c6d0
- https://github.com/SteeltoeOSS/Steeltoe/releases/tag/4.3.0
nvd · CVE-2026-81868
- https://github.com/SteeltoeOSS/Steeltoe/commit/b626ef3d60aaf19c68eeeed5ee81045406c8c6d0
- https://github.com/SteeltoeOSS/Steeltoe/releases/tag/4.3.0
- https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-5mq7-rwhj-4fh9
osv · GHSA-5mq7-rwhj-4fh9
- https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-5mq7-rwhj-4fh9
- https://nvd.nist.gov/vuln/detail/CVE-2026-81868
- https://github.com/SteeltoeOSS/Steeltoe/commit/b626ef3d60aaf19c68eeeed5ee81045406c8c6d0
- https://github.com/SteeltoeOSS/Steeltoe/releases/tag/4.3.0
- https://github.com/SteeltoeOSS/security-advisories
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.