CVE-2026-27459
EUVD-2026-1267718.03.2026, 00:16
pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| pyopenssl | pyopenssl | 22.0.0 ≤ 𝑥 < 26.0.0 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 | 0:26.0.0-1.el8ap ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 | 0:26.0.0-1.el9ap ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 | 0:4.7.11-2.el9ap ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 | 0:26.0.0-1.el9ap ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Satellite 6.16 for RHEL 8 | 0:24.1.0-2.el8pc ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Satellite 6.16 for RHEL 9 | 0:24.1.0-2.el9pc ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 | 0:25.1.0-0.3.el9pc ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Satellite 6.18 for RHEL 9 | 0:26.0.0-2.el9pc ≤ 𝑥 < * | ADP |
| Red Hat | RHUI 4 for RHEL 8 | 0:24.1.0-2.el8ui ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.5 | 1777398315 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.5 | 1777403872 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | 1777390240 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | 1777296732 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | 1777391447 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | 1777299023 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | 1777387242 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | 1777390333 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Hardened Images | 26.0.0-1.1.hum1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.1 | 1776736910 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.12 | 1776752646 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.14 | 1779689392 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.15 | 1780891395 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.16 | 1779204086 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.17 | 1779922205 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.18 | 1784987273 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.9 | 1776782369 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1775815407 ≤ 𝑥 < * | ADP |
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| python311-pyOpenSSL |
|
References