Veille CVE

Lundi 17 août 2026

2 CVE sur 12

Critique 2 Élevée 7 Moyenne 3 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Python python » ✕
  1. CVE-2026-74899 9.8 Critique

    jahlives openssl_encrypt · Jahlives openssl encrypt

    openssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in IsolatedPluginExecutor that exposes Python type objects in restricted exec() builtins. Attackers can traverse the Python class hierarchy via __class__.__mro__.__subclasses__() to access system functions and execute arbitrary OS commands.

  2. CVE-2026-74895 9.8 Critique

    jahlives openssl_encrypt · Jahlives openssl encrypt

    openssl_encrypt versions before 1.4.0 fail to apply sandbox restrictions in the default process isolation mode for plugin execution. Attackers can execute malicious plugins with unrestricted access to the filesystem, network, subprocess execution, and all Python modules.