CVE-2026-26007

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 8.2EPSS <1%

Published 2026-02-10Updated 2026-02-10

Media 4497

Vulnerability details

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the public_key_from_numbers (or EllipticCurvePublicNumbers.public_key()), EllipticCurvePublicNumbers.public_key(), load_der_public_key() and load_pem_public_key() functions do not verify that the point belongs to the expected prime-order subgroup of the curve. This missing validation allows an attacker to provide a public key point P from a small-order subgroup. This can lead to security issues in various situations, such as the most commonly used signature verification (ECDSA) and shared key negotiation (ECDH). When the victim computes the shared secret as S = [victim_private_key]P via ECDH, this leaks information about victim_private_key mod (small_subgroup_order). For curves with cofactor > 1, this reveals the least significant bits of the private key. When these weak public keys are used in ECDSA , it's easy to forge signatures on the small subgroup. Only SECT curves are impacted by this. This vulnerability is fixed in 46.0.5.

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CNAGitHub_M

EPSS score history

Sources

4 links

PoC links are not available for guest users. Login to view them.

CVEShield CVE Organization RedHat Vuln DB NVD Analysis

Profile

CVSS

8.2

EPSS

<1%

Published

2026-02-10

Updated

2026-02-10

CNA

GitHub_M

Vendors

pyca

1 product

CPEs

cpe:/a:redhat:ansible_automation_platform:2.5::el8

cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8

cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8

cpe:/a:redhat:ansible_automation_platform:2.5::el9

cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9

cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9

cpe:/a:redhat:enterprise_linux:8::appstream

cpe:/a:redhat:rhel_e4s:9.2::appstream

cpe:/a:redhat:rhel_eus:9.4::appstream

cpe:/a:redhat:rhel_eus:9.6::appstream

cpe:/a:redhat:enterprise_linux:9::appstream

cpe:/a:redhat:enterprise_linux:8::highavailability

cpe:/a:redhat:rhel_e4s:9.2::highavailability

cpe:/a:redhat:rhel_eus:9.4::highavailability

cpe:/a:redhat:ansible_automation_platform:2.6::el9

cpe:/a:redhat:discovery:2::el9

cpe:/a:redhat:hummingbird:1

cpe:/a:redhat:openshift_ai:2.25::el9

cpe:/a:redhat:quay:3.15::el8

cpe:/a:redhat:quay:3.16::el9

cpe:/a:redhat:quay:3.10::el8

cpe:/a:redhat:quay:3.9::el8

cpe:/a:redhat:satellite:6.18::el9

cpe:/a:redhat:enterprise_linux:8::resilientstorage

cpe:/a:redhat:rhel_e4s:9.2::resilientstorage

cpe:/a:redhat:rhel_eus:9.4::resilientstorage

cpe:/a:redhat:openshift_lightspeed

cpe:/a:redhat:ansible_automation_platform:2

cpe:/a:redhat:openshift_ai

cpe:/a:redhat:satellite:6

cpe:/a:redhat:trusted_artifact_signer:1

cpe:/a:redhat:acm:2

cpe:/a:redhat:ansible_core:2

cpe:/o:redhat:enterprise_linux:10

cpe:/o:redhat:enterprise_linux:8

cpe:/o:redhat:enterprise_linux:9

cpe:/a:redhat:enterprise_linux:8

cpe:/a:redhat:enterprise_linux:9

cpe:/a:redhat:rhel_e4s:9.2

cpe:/a:redhat:rhel_eus:9.4

cpe:/a:redhat:rhel_eus:9.6

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated