Microsoft Go-ntlmssp — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Go-ntlmssp, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-32952 — CVSS 5.3 (medium): go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge…