Buffer Overflow

🗓️ 16 Mar 2026 16:22:29Reported by Snyk Security DatabaseType

Buffer overflow in pyopenssl set_cookie_generate_callback from oversize cookie; upgrade to 26.0.0+.

Reporter	Title	Published	Views	Family All 148
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	22 Jun 202614:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by multiple vulnerabilities due to pyOpenSSL	10 Jul 202606:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a security bypass in pyOpenSSL [CVE-2026-27448, CVE-2026-27459]	21 May 202615:10	–	ibm
IBM Security Bulletins	Security Bulletin: pyOpenSSL TLS SNI Callback Exception Handling Flaw Allows Security Bypass	4 May 202612:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in pyOpenSSL bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging	18 May 202622:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SOAR QRadar Plugin App is vulnerable to using components with known vulnerabilities	6 May 202616:21	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cryptography, pyOpenSSL & golang affect IBM Storage Protect Plus	26 Jun 202606:08	–	ibm
ATTACKERKB	CVE-2026-27459	17 Mar 202623:34	–	attackerkb
AlpineLinux	CVE-2026-27459	17 Mar 202623:34	–	alpinelinux
AstraLinux	Astra Linux – Vulnerability in pyopenssl	24 Jun 202615:11	–	astralinux

Vulners

Node

pyopenssl pyopensslRange22.0.0–26.0.0

Source	Link
cwe	www.cwe.mitre.org/data/definitions/CWE-120.html
security	www.security.snyk.io/vuln/SNYK-PYTHON-PYOPENSSL-15674459

05 Apr 2026 23:03Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.19.8

CVSS 49.2

EPSS0.00704

SSVC