TLS Connection Bypass

🗓️ 21 Mar 2026 05:27:51Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 2 Views

pyOpenSSL TLS bypass caused by unhandled exception in set_tlsext_servername_callback.

Reporter	Title	Published	Views	Family All 85
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a security bypass in pyOpenSSL [CVE-2026-27448, CVE-2026-27459]	21 May 202615:10	–	ibm
IBM Security Bulletins	Security Bulletin: pyOpenSSL TLS SNI Callback Exception Handling Flaw Allows Security Bypass	4 May 202612:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in pyOpenSSL bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging	18 May 202622:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SOAR QRadar Plugin App is vulnerable to using components with known vulnerabilities	6 May 202616:21	–	ibm
ATTACKERKB	CVE-2026-27448	17 Mar 202623:24	–	attackerkb
AlpineLinux	CVE-2026-27448	17 Mar 202623:24	–	alpinelinux
CBLMariner	CVE-2026-27448 affecting package pyOpenSSL for versions less than 24.2.1-2	25 Mar 202622:53	–	cbl_mariner
Chainguard	CVE-2026-27448 vulnerabilities	18 Mar 202601:17	–	cgr
CNNVD	pyOpenSSL 安全漏洞	17 Mar 202600:00	–	cnnvd
CVE	CVE-2026-27448	17 Mar 202623:24	–	cve

Vulners

Node

py3-openssl py3-opensslMatch24.1.0-r1python

AND

py3-openssl py3-opensslMatch22.1.0-r0python

AND

py3-openssl py3-opensslMatch25.3.0-r1python

AND

py3-openssl py3-opensslMatch22.1.0-r2python

AND

py3-openssl py3-opensslMatch23.0.0-r0python

AND

py3-openssl py3-opensslMatch23.1.1-r0python

AND

py3-openssl py3-opensslMatch20.0.1-r0python

AND

py3-openssl py3-opensslMatch20.0.1-r1python

AND

py3-openssl py3-opensslMatch23.1.1-r1python

AND

py3-openssl py3-opensslMatch25.0.0-r0python

AND

py3-openssl py3-opensslMatch24.3.0-r0python

AND

py3-openssl py3-opensslMatch22.1.0-r1python

AND

py3-openssl py3-opensslMatch24.1.0-r0python

AND

py3-openssl py3-opensslMatch25.3.0-r0python

AND

py3-openssl py3-opensslMatch21.0.0-r0python

AND

py3-openssl py3-opensslMatch21.0.0-r1python

AND

py3-openssl py3-opensslMatch19.1.0-r0python

AND

py3-openssl py3-opensslMatch23.2.0-r0python

AND

py3-openssl py3-opensslMatch23.3.0-r0python

AND

alpinelinux alpine_linuxMatchedge

py3-openssl py3-opensslMatch25.3.0-r0python

AND

alpinelinux alpine_linuxMatch3.23

pyopenssl pyopensslRange0.14–25.3.0python

pyopenssl pyopensslMatch0.14python

pyopenssl pyopensslMatch0.15python

pyopenssl pyopensslMatch0.15.1python

pyopenssl pyopensslMatch16.0.0python

pyopenssl pyopensslMatch16.1.0python

pyopenssl pyopensslMatch16.2.0python

pyopenssl pyopensslMatch17.0.0python

pyopenssl pyopensslMatch17.1.0python

pyopenssl pyopensslMatch17.2.0python

pyopenssl pyopensslMatch17.3.0python

pyopenssl pyopensslMatch17.4.0python

pyopenssl pyopensslMatch17.5.0python

pyopenssl pyopensslMatch18.0.0python

pyopenssl pyopensslMatch19.0.0python

pyopenssl pyopensslMatch19.1.0python

pyopenssl pyopensslMatch20.0.0python

pyopenssl pyopensslMatch20.0.1python

pyopenssl pyopensslMatch21.0.0python

pyopenssl pyopensslMatch22.0.0python

pyopenssl pyopensslMatch22.1.0python

pyopenssl pyopensslMatch23.0.0python

pyopenssl pyopensslMatch23.1.0python

pyopenssl pyopensslMatch23.1.1python

pyopenssl pyopensslMatch23.2.0python

pyopenssl pyopensslMatch23.3.0python

pyopenssl pyopensslMatch24.0.0python

pyopenssl pyopensslMatch24.1.0python

pyopenssl pyopensslMatch24.2.1python

pyopenssl pyopensslMatch24.3.0python

pyopenssl pyopensslMatch25.0.0python

pyopenssl pyopensslMatch25.1.0python

pyopenssl pyopensslMatch25.2.0python

Source	Link
github	www.github.com/pyca/pyopenssl/commit/d41a814759a9fb49584ca8ab3f7295de49a85aa0
github	www.github.com/pyca/pyopenssl/security/advisories/GHSA-vp96-hxj8-p424

09 May 2026 05:41Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.15.3

CVSS 46.3

EPSS0.00043

SSVC