Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-27448

Опубликовано: 19 мар. 2026
Источник: msrc
EPSS Низкий

Описание

pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback

EPSS

Процентиль: 15%
0.00241
Низкий

Связанные уязвимости

CVSS3: 5.3
ubuntu
5 месяцев назад

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for any security-sensitive behavior, this could allow bypassing it. Starting in version 26.0.0, unhandled exceptions now result in rejecting the connection.

CVSS3: 5.4
redhat
5 месяцев назад

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for any security-sensitive behavior, this could allow bypassing it. Starting in version 26.0.0, unhandled exceptions now result in rejecting the connection.

CVSS3: 5.3
nvd
5 месяцев назад

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for any security-sensitive behavior, this could allow bypassing it. Starting in version 26.0.0, unhandled exceptions now result in rejecting the connection.

CVSS3: 5.3
debian
5 месяцев назад

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in ...

suse-cvrf
3 месяца назад

Security update for python-pyOpenSSL

EPSS

Процентиль: 15%
0.00241
Низкий