High WID-SEC-2026-4189 3 CVEs

Python: Mehrere Schwachstellen

Published Oct 27, 2026 · Updated Nov 12, 2026 · Revision 6 · de

Vendor: NETAPP Vendor: Red Hat Product: ActiveIQ Unified Manager Product: Enterprise Linux Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Python ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder Dateien zu manipulieren.

Product

Python ist eine universelle, üblicherweise interpretierte, höhere Programmiersprache.

Vulnerabilities 3

Critical 9.4

CVE-2026-115557

Distrust compromised intermediate certificates in ssl module

Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configur…

Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Alpine Wolfi

Oct 24, 2026
Medium 6.9

CVE-2026-114583

tar filter allows writing outside destination via empty-named symlink

tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extracta…

Python Software Foundation CPython tensorflow python3.4 Debian Ubuntu Azure Linux Alpine Wolfi

Oct 22, 2026
Low 2.0

CVE-2026-103995

Lenient parsing of integers for response body and chunk framing

Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents.

Python Software Foundation CPython tensorflow python3.4 Ubuntu Azure Linux Wolfi

Oct 27, 2026

Revision history

2026-11-12 #6
Neue Updates von Red Hat aufgenommen
2026-11-11 #5
Neue Updates von Red Hat aufgenommen
2026-11-08 #4
Neue Updates von NetApp aufgenommen
2026-10-29 #3
Neue Updates von Red Hat aufgenommen
2026-10-28 #2
Neue Updates von Red Hat aufgenommen
2026-10-27 #1
Initiale Fassung

References

GitHub Security Advisory vom 2026-10-27
https://github.com/advisories/GHSA-pp6r-vffx-rvqj
GitHub Security Advisory vom 2026-10-27
https://github.com/advisories/GHSA-MW29-5QXH-RR87
GitHub Security Advisory vom 2026-10-27
https://github.com/advisories/GHSA-X547-2835-Q547
Red Hat Security Advisory RHSA-2026:92066 vom 2026-10-28
https://access.redhat.com/errata/RHSA-2026:92066
Red Hat Security Advisory RHSA-2026:92809 vom 2026-10-29
https://access.redhat.com/errata/RHSA-2026:92809
Red Hat Security Advisory RHSA-2026:92789 vom 2026-10-29
https://access.redhat.com/errata/RHSA-2026:92789
Red Hat Security Advisory RHSA-2026:92902 vom 2026-10-30
https://access.redhat.com/errata/RHSA-2026:92902
Red Hat Security Advisory RHSA-2026:92811 vom 2026-10-29
https://access.redhat.com/errata/RHSA-2026:92811
Red Hat Security Advisory RHSA-2026:92808 vom 2026-10-29
https://access.redhat.com/errata/RHSA-2026:92808
NetApp Security Advisory NTAP-20261106-0003 vom 2026-11-06
https://security.netapp.com/advisory/NTAP-20261106-0003
NetApp Security Advisory NTAP-20261106-0005 vom 2026-11-06
https://security.netapp.com/advisory/NTAP-20261106-0005
Red Hat Security Advisory RHSA-2026:98533 vom 2026-11-11
https://access.redhat.com/errata/RHSA-2026:98533
Red Hat Security Advisory RHSA-2026:98511 vom 2026-11-11
https://access.redhat.com/errata/RHSA-2026:98511
Red Hat Security Advisory RHSA-2026:99691 vom 2026-11-13
https://access.redhat.com/errata/RHSA-2026:99691