USN-8087-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 12 Mar 2026, 14:16
Last modified:24 Jul 2026, 15:31

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

12 Mar 2026, 14:16
Published
Vulnerability first disclosed
24 Jul 2026, 15:31
Last Modified
Vulnerability information updated

Description

python-cryptography vulnerability It was discovered that python-cryptography incorrectly handled subgroup validation for SECT curves. A remote attacker could use this issue to perform a subgroup attack and possibly recover the least significant bits of private keys.

Affected Systems

  • ubuntu•python-cryptography

    < 3.4.8-1ubuntu2.3 | < 41.0.7-4ubuntu0.3 | < 43.0.0-1ubuntu1.1

References (2)