PT-2026-32007 · Rocky Linux · Rocky Linux

Senseicat + 1 · Published 2026-04-10 · Updated 2026-05-24 · CVE-2026-1502

Positive Technologies (AI Summary)

CVSS v4.0

5.7

Medium

Base vector

AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. (affected versions not specified)

Description The system does not reject carriage return and line feed (CR/LF) bytes in HTTP client proxy tunnel headers or the host.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-93

Related Identifiers

ALSA-2026:10950

ALSA-2026:19019

ALSA-2026:19064

ALSA-2026:19176

ALSA-2026:19177

BIT-LIBPYTHON-2026-1502

BIT-PYTHON-2026-1502

BIT-PYTHON-MIN-2026-1502

CVE-2026-1502

ECHO-6948-71F0-8930

OESA-2026-2115

OESA-2026-2116

OESA-2026-2117

OPENSUSE-SU-2026:10647-1

OPENSUSE-SU-2026:10648-1

OPENSUSE-SU-2026:10667-1

PSF-2026-15

RHSA-2026:10117

RHSA-2026:10950

RHSA-2026:19064

RHSA-2026:19177

RHSA-2026:8822

RHSA-2026:8824

RHSA-2026:9228

Affected Products

Rocky Linux

References · 93

• https://github.com/python/cpython/commit/9e071c9b28c17f347f81b388a003d4eeb3c7a8dd · Patch
• https://github.com/python/cpython/commit/c00c386faa579ad71196d33408644478488e43ec · Patch
• https://github.com/python/cpython/commit/05ed7ce7ae9e17c23a04085b2539fe6d6d3cef69 · Patch
• https://github.com/python/cpython/pull/146212 · Patch
• https://github.com/python/cpython/commit/b1cf9016335cb637c5a425032e8274a224f4b2ed · Patch
• https://errata.almalinux.org/8/ALSA-2026-10950.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-4786 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2117 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-1502 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2116 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-1502 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-6100 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-1502 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2026-19176.html · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2026-1502 · Vendor Advisory