Linuxsecurity Critical Python Vulnerabilities Affect Multiple Ubuntu Versions
Article Content
- •Critical vulnerabilities in Python affect Ubuntu 14.04 to 24.04 LTS.
- •Attackers can exploit these flaws for denial of service and code injection.
- •Patches are available; immediate updates are recommended.
Multiple vulnerabilities in Python's modules have been identified, affecting Ubuntu 14.04 LTS to 24.04 LTS. Key issues include improper handling of control characters in the http.cookies module (CVE-2026-3644), unbounded recursion in the pyexpat module leading to denial of service (CVE-2026-4224), and incorrect extraction of hard links in the tarfile module (CVE-2026-4360). These vulnerabilities could allow attackers to inject arbitrary content or crash systems, impacting a wide range of users. The vulnerabilities were disclosed on September 10, 2026, and patches are available for affected systems. Security professionals are urged to update their Python installations promptly to mitigate risks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Ubuntu and CVE-2026-15308 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Denial of Service Vulnerabilities in Fedora Python Packages Fedora has released security advisories for Python packages 3.12 and 3.14.7, addressing critical Denial of Service (DoS) vulnerabilities. The vulnerabilities include CVE-2026-7210, CVE-2026-3276, and CVE-2026-15308, which allow attackers to exploit crafted XML documents and excessive CPU consumption through malformed… 
Critical Cisco FMC Vulnerabilities Under Active Exploitation Cisco's Secure Firewall Management Center (FMC) Software has two critical vulnerabilities, CVE-2026-20079 and CVE-2026-20316, that are currently being exploited by state-sponsored and ransomware actors. CVE-2026-20079, rated 10.0 on the CVSS scale, allows unauthenticated remote attackers to bypass authentication and…