PT-2026-32007 · Linux Mint+2 · Linuxmint+2

Senseicat + 1 · CVE-2026-1502 · Published 2026-03-20 · Updated 2026-07-28

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:N/AC:L/Au:M/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. (affected versions not specified)

Description The system does not reject carriage return and line feed (CR/LF) bytes in HTTP client proxy tunnel headers or the host.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Weakness Enumeration

CWE-93

Related Identifiers

ALSA-2026:10950

ALSA-2026:19019

ALSA-2026:19064

ALSA-2026:19176

ALSA-2026:19177

BDU:2026-09515

BIT-LIBPYTHON-2026-1502

BIT-PYTHON-2026-1502

BIT-PYTHON-MIN-2026-1502

CVE-2026-1502

ECHO-6948-71F0-8930

OESA-2026-2115

OESA-2026-2116

OESA-2026-2117

OPENSUSE-SU-2026:10647-1

OPENSUSE-SU-2026:10648-1

OPENSUSE-SU-2026:10667-1

OPENSUSE-SU-2026:11068-1

OPENSUSE-SU-2026:11100-1

OPENSUSE-SU-2026:11181-1

OPENSUSE-SU-2026:21459-1

PSF-2026-15

RHSA-2026:10117

RHSA-2026:10950

RHSA-2026:19064

RHSA-2026:19177

RHSA-2026:8822

RHSA-2026:8824

RHSA-2026:9228

SUSE-SU-2026:1715-1

SUSE-SU-2026:1818-1

SUSE-SU-2026:1937-1

SUSE-SU-2026:1947-1

SUSE-SU-2026:2055-1

SUSE-SU-2026:2464-1

SUSE-SU-2026:3104-1

SUSE-SU-2026:3132-1

USN-8509-1

Affected Products

Linuxmint

Red Os

Rocky Linux

References · 165

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/1xxx/CVE-2026-1502.json · Exploit
• https://github.com/python/cpython/commit/9e071c9b28c17f347f81b388a003d4eeb3c7a8dd · Patch
• https://github.com/python/cpython/commit/05ed7ce7ae9e17c23a04085b2539fe6d6d3cef69 · Patch
• https://github.com/python/cpython/pull/146212 · Patch
• https://github.com/python/cpython/commit/c00c386faa579ad71196d33408644478488e43ec · Patch
• https://github.com/python/cpython/commit/b1cf9016335cb637c5a425032e8274a224f4b2ed · Patch
• https://github.com/python/cpython/commit/56b7100b04e44ea27989242b176beb8f016b2c53 · Patch
• https://github.com/python/cpython/commit/58703ec1bdd1eb075e8b01a0c427683ce594dd3e · Patch
• https://ubuntu.com/security/CVE-2026-6100 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:19176 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-1502 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-4786 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:11181-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2116 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-libpython-2026-1502 · Vendor Advisory