PT-2026-25840

🗓️ 18 Feb 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 8 Views

Long cookie values in set cookie generate callback are rejected to prevent OpenSSL buffer overflow.

Reporter	Title	Published	Views	Family All 237
IBM Security Bulletins	Security Bulletin: Vulnerability pyopenssl, jackson-core, pyasn, log4j-core, handlebars, twisted, bcpkix-jdk18on, Mako, httpd, apache2-build, wheel, click, moment-timezone-with-data, urllib, pip July 2026	27 Jul 202616:25	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	22 Jun 202614:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Predict Component uses multiple dependencies which are vulnerable to multiple CVEs	3 Aug 202609:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by multiple vulnerabilities due to pyOpenSSL	10 Jul 202606:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple vulnerabilities due to pyOpenSSL	26 Aug 202609:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a security bypass in pyOpenSSL [CVE-2026-27448, CVE-2026-27459]	21 May 202615:10	–	ibm
IBM Security Bulletins	Security Bulletin: pyOpenSSL TLS SNI Callback Exception Handling Flaw Allows Security Bypass	4 May 202612:18	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability in Python affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak	20 Jun 202612:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)	5 Jun 202607:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in pyOpenSSL bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging	18 May 202622:19	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-31958
bdu	www.bdu.fstec.ru/vul/2026-11379
osv	www.osv.dev/vulnerability/ghsa-2h4p-vjrc-8xpq
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-34516
osv	www.osv.dev/vulnerability/CVE-2026-22815
twitter	www.twitter.com/CVEnew/status/2034136450803945701
ubuntu	www.ubuntu.com/security/CVE-2026-27448
osv	www.osv.dev/vulnerability/CVE-2026-34518
osv	www.osv.dev/vulnerability/ghsa-7f5h-v6xp-fcq8
twitter	www.twitter.com/oss_security/status/2035155951032877435

18 Aug 2026 00:00Current

6Medium risk

Vulners AI Score6

CVSS 210

CVSS 3.18.1 - 9.8

CVSS 49.2

EPSS0.00704

SSVC