CVE-2026-17084

EUVD-2026-60889

18.08.2026, 14:16

The "stringprep" module didn't process characters from RFC 3454 tables
B.2 or B.3 correctly: the latest Unicode codepoint attributes were used
instead of the specified Unicode 3.2.0. This behavior would cause
mismatches when processing domain names using IDNA 2003 (the "idna"
codec) and the in_table_b2() function of the "stringprep" module. This
only affects domain names containing characters that were not previously
registered or had their Unicode attributes such as case-folding
behavior updated since Unicode 3.2.0.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
PSF	CNA	6 MEDIUM	NETWORK	LOW	NONE	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 52.29%

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
python	cpython	𝑥 < 3.10.22	CNA
python	cpython	3.11.0 ≤ 𝑥 < 3.11.17	CNA
python	cpython	3.12.0 ≤ 𝑥 < 3.12.15	CNA
python	cpython	3.13.0 ≤ 𝑥 < 3.13.16	CNA
python	cpython	3.14.0 ≤ 𝑥 < 3.14.8	CNA

Debian Releases

Debian Product

Codename

pypy3

bookworm	postponed
forky	vulnerable
sid	vulnerable
trixie	no-dsa

python3.11

bookworm	vulnerable
bookworm (security)	vulnerable

python3.13

forky	vulnerable
sid	vulnerable
trixie	no-dsa

python3.14

forky	3.14.7-4 fixed
sid	3.14.7-5 fixed

python3.15

forky	3.15.0~rc2-2 fixed
sid	3.15.0~rc2-3 fixed

Ubuntu Releases

Ubuntu Product

Codename

python2.7

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
noble	dne
resolute	dne
trusty	needs-triage
xenial	needs-triage

python3.4

jammy	dne
noble	dne
resolute	dne
trusty	needs-triage

python3.5

jammy	dne
noble	dne
resolute	dne
trusty	needs-triage
xenial	needs-triage

python3.6

bionic	needs-triage
jammy	dne
noble	dne
resolute	dne

python3.7

bionic	needs-triage
jammy	dne
noble	dne
resolute	dne

python3.8

bionic	needs-triage
focal	needs-triage
jammy	dne
noble	dne
resolute	dne

python3.9

focal	needs-triage
jammy	dne
noble	dne
resolute	dne

python3.10

jammy	needs-triage
noble	dne
resolute	dne

python3.11

jammy	needs-triage
noble	dne
resolute	dne

python3.12

jammy	dne
noble	needs-triage
resolute	dne

python3.14

jammy	dne
noble	dne
resolute	needs-triage

openSUSE / SLES Releases

openSUSE Product

Release

libpython3_10-1_0

suse enterprise server 15 SP4

3.10.21-150400.4.126.1

fixed

libpython3_11-1_0

suse enterprise sap 15 SP4	3.11.16-150400.9.102.1 fixed
suse enterprise sap 15 SP5	3.11.16-150400.9.102.1 fixed
suse enterprise server 15 SP4	3.11.16-150400.9.102.1 fixed
suse enterprise server 15 SP5	3.11.16-150400.9.102.1 fixed

libpython3_13-1_0

suse enterprise desktop 15 SP7	3.13.15-150700.4.56.1 fixed
suse enterprise sap 15 SP7	3.13.15-150700.4.56.1 fixed
suse enterprise server 15 SP7	3.13.15-150700.4.56.1 fixed

python310

suse enterprise server 15 SP4

3.10.21-150400.4.126.1

fixed

python310-base

suse enterprise server 15 SP4

3.10.21-150400.4.126.1

fixed

python310-curses

suse enterprise server 15 SP4

3.10.21-150400.4.126.1

fixed

python310-dbm

suse enterprise server 15 SP4

3.10.21-150400.4.126.1

fixed

python310-devel

suse enterprise server 15 SP4

3.10.21-150400.4.126.1

fixed

python310-idle

suse enterprise server 15 SP4

3.10.21-150400.4.126.1

fixed

python310-tk

suse enterprise server 15 SP4

3.10.21-150400.4.126.1

fixed

python310-tools

suse enterprise server 15 SP4

3.10.21-150400.4.126.1

fixed

python311

suse enterprise sap 15 SP4	3.11.16-150400.9.102.1 fixed
suse enterprise sap 15 SP5	3.11.16-150400.9.102.1 fixed
suse enterprise server 15 SP4	3.11.16-150400.9.102.1 fixed
suse enterprise server 15 SP5	3.11.16-150400.9.102.1 fixed

python311-base

suse enterprise sap 15 SP4	3.11.16-150400.9.102.1 fixed
suse enterprise sap 15 SP5	3.11.16-150400.9.102.1 fixed
suse enterprise server 15 SP4	3.11.16-150400.9.102.1 fixed
suse enterprise server 15 SP5	3.11.16-150400.9.102.1 fixed

python311-curses

suse enterprise sap 15 SP4	3.11.16-150400.9.102.1 fixed
suse enterprise sap 15 SP5	3.11.16-150400.9.102.1 fixed
suse enterprise server 15 SP4	3.11.16-150400.9.102.1 fixed
suse enterprise server 15 SP5	3.11.16-150400.9.102.1 fixed

python311-dbm

suse enterprise sap 15 SP4	3.11.16-150400.9.102.1 fixed
suse enterprise sap 15 SP5	3.11.16-150400.9.102.1 fixed
suse enterprise server 15 SP4	3.11.16-150400.9.102.1 fixed
suse enterprise server 15 SP5	3.11.16-150400.9.102.1 fixed

python311-devel

suse enterprise sap 15 SP4	3.11.16-150400.9.102.1 fixed
suse enterprise sap 15 SP5	3.11.16-150400.9.102.1 fixed
suse enterprise server 15 SP4	3.11.16-150400.9.102.1 fixed
suse enterprise server 15 SP5	3.11.16-150400.9.102.1 fixed

python311-doc

suse enterprise sap 15 SP4	3.11.16-150400.9.102.1 fixed
suse enterprise sap 15 SP5	3.11.16-150400.9.102.1 fixed
suse enterprise server 15 SP4	3.11.16-150400.9.102.1 fixed
suse enterprise server 15 SP5	3.11.16-150400.9.102.1 fixed

python311-doc-devhelp

suse enterprise sap 15 SP4	3.11.16-150400.9.102.1 fixed
suse enterprise sap 15 SP5	3.11.16-150400.9.102.1 fixed
suse enterprise server 15 SP4	3.11.16-150400.9.102.1 fixed
suse enterprise server 15 SP5	3.11.16-150400.9.102.1 fixed

python311-idle

suse enterprise sap 15 SP4	3.11.16-150400.9.102.1 fixed
suse enterprise sap 15 SP5	3.11.16-150400.9.102.1 fixed
suse enterprise server 15 SP4	3.11.16-150400.9.102.1 fixed
suse enterprise server 15 SP5	3.11.16-150400.9.102.1 fixed

python311-tk

suse enterprise sap 15 SP4	3.11.16-150400.9.102.1 fixed
suse enterprise sap 15 SP5	3.11.16-150400.9.102.1 fixed
suse enterprise server 15 SP4	3.11.16-150400.9.102.1 fixed
suse enterprise server 15 SP5	3.11.16-150400.9.102.1 fixed

python311-tools

suse enterprise sap 15 SP4	3.11.16-150400.9.102.1 fixed
suse enterprise sap 15 SP5	3.11.16-150400.9.102.1 fixed
suse enterprise server 15 SP4	3.11.16-150400.9.102.1 fixed
suse enterprise server 15 SP5	3.11.16-150400.9.102.1 fixed

python313

suse enterprise desktop 15 SP7	3.13.15-150700.4.56.1 fixed
suse enterprise sap 15 SP7	3.13.15-150700.4.56.1 fixed
suse enterprise server 15 SP7	3.13.15-150700.4.56.1 fixed

python313-base

suse enterprise desktop 15 SP7	3.13.15-150700.4.56.1 fixed
suse enterprise sap 15 SP7	3.13.15-150700.4.56.1 fixed
suse enterprise server 15 SP7	3.13.15-150700.4.56.1 fixed

python313-curses

suse enterprise desktop 15 SP7	3.13.15-150700.4.56.1 fixed
suse enterprise sap 15 SP7	3.13.15-150700.4.56.1 fixed
suse enterprise server 15 SP7	3.13.15-150700.4.56.1 fixed

python313-dbm

suse enterprise desktop 15 SP7	3.13.15-150700.4.56.1 fixed
suse enterprise sap 15 SP7	3.13.15-150700.4.56.1 fixed
suse enterprise server 15 SP7	3.13.15-150700.4.56.1 fixed

python313-devel

suse enterprise desktop 15 SP7	3.13.15-150700.4.56.1 fixed
suse enterprise sap 15 SP7	3.13.15-150700.4.56.1 fixed
suse enterprise server 15 SP7	3.13.15-150700.4.56.1 fixed

python313-idle

suse enterprise desktop 15 SP7	3.13.15-150700.4.56.1 fixed
suse enterprise sap 15 SP7	3.13.15-150700.4.56.1 fixed
suse enterprise server 15 SP7	3.13.15-150700.4.56.1 fixed

python313-tk

suse enterprise desktop 15 SP7	3.13.15-150700.4.56.1 fixed
suse enterprise sap 15 SP7	3.13.15-150700.4.56.1 fixed
suse enterprise server 15 SP7	3.13.15-150700.4.56.1 fixed

python313-tools

suse enterprise desktop 15 SP7	3.13.15-150700.4.56.1 fixed
suse enterprise sap 15 SP7	3.13.15-150700.4.56.1 fixed
suse enterprise server 15 SP7	3.13.15-150700.4.56.1 fixed

Common Weakness Enumeration

CWE-436 - Interpretation Conflict
Product A handles inputs or steps differently than Product B, which causes A to perform incorrect actions based on its perception of B's state.

Vulnerability Media Exposure

[GERMAN] CPython: Mehrere Schwachstellen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in CPython ausnutzen, um Informationen offenzulegen und um nicht näher spezifizierte Auswirkungen zu erzielen.
Published: 2026-08-18T22:00:00+00:00

References

https://github.com/python/cpython/commit/1e54caa096678a38afcabecabb1ff72400dd6bae

https://github.com/python/cpython/commit/5181304bcec9cfc3c15311741c9154cdff2e3fd7

https://github.com/python/cpython/commit/69f92ebaec681e9149dfd70fd02d4ed52d2a6296

https://github.com/python/cpython/commit/7e109d084d55e7eb25837a5f3b47ef9beee547bc

https://github.com/python/cpython/commit/c016c2535b74227fddf2cf7334dbfead6c930214

https://github.com/python/cpython/commit/c28b121a4f0b975937c8b5a1b4934bb361d84296

https://github.com/python/cpython/commit/c42790b34f634051750e5da340d17c7da19e4784

https://github.com/python/cpython/commit/d397a4979cfc80a8cd6c73838aa10e9c8cf5ef72

https://github.com/python/cpython/issues/155292

https://github.com/python/cpython/pull/155293

https://mail.python.org/archives/list/security-announce@python.org/thread/EUHHTC6EV7HCLSUHP25C5VHSV4V2MUZN/

http://www.openwall.com/lists/oss-security/2026/08/18/2