Linuxsecurity Critical pyOpenSSL Vulnerabilities Affect Ubuntu Users
Article Content
- •CVE-2026-27448 and CVE-2026-27459 affect Ubuntu 24.04 LTS and 25.10.
- •Exploiting these vulnerabilities can lead to denial of service or arbitrary code execution.
- •Users should update to the latest package versions to mitigate risks.
Two vulnerabilities were discovered in pyOpenSSL, affecting Ubuntu 24.04 LTS and 25.10. CVE-2026-27448 allows connections to be accepted after an exception in the tlsext_servername callback, contrary to expectations. CVE-2026-27459 involves improper handling of DTLS cookie generation, where attackers can exploit cookie values over 256 bytes to crash pyOpenSSL, leading to denial of service or potential arbitrary code execution. Both issues were published on 2026-03-17. The vulnerabilities primarily impact Ubuntu users, particularly those on the specified versions. A standard system update is recommended to mitigate these vulnerabilities. Ubuntu Pro offers extended security coverage for affected packages. Users are urged to update their systems to the latest package versions to ensure security.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Ubuntu and CVE-2026-27448 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
PHP2Shell Vulnerabilities Exploited by AI-Driven Attackers Threat actors have exploited PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) to target a government entity in Europe, gaining access to sensitive data within two hours of the initial breach. The attackers utilized AI tools for reconnaissance and post-exploitation activities, including accessing… 
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…