PT-2026-105768

A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni callback assigns a different context to SSLSocket.context the documented way to select a certificate per server name and nothing else keeps the original ssl.SSLContext alive. Typical cases are...

PT-2026-103460

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A remote, unauthenticated TLS client can cause a server to crash or trigger a use-after-free condition where the system attempts to use a memory pointer after i...

Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple vulnerabilities due to pyOpenSSL

Summary pyOpenSSL is used by IBM Integrated Analytics System as a Python wrapper around the OpenSSL library for SSL/TLS functionality. Multiple vulnerabilities affect pyOpenSSL versions prior to 26.0.0. CVE-2026-27448 involves a "fail open" behavior where an unhandled exception in a user-provided...