جزئیات آسیب‌پذیری
CVE-2026-26007
cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves
شرح رسمی (انگلیسی)
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the public_key_from_numbers (or EllipticCurvePublicNumbers.public_key()), EllipticCurvePublicNumbers.public_key(), load_der_public_key() and load_pem_public_key() functions do not verify that the point belongs to the expected prime-order subgroup of the curve. This missing validation allows an attacker to provide a public key point P from a small-order subgroup. This can lead to security issues in various situations, such as the most commonly used signature verification (ECDSA) and shared key negotiation (ECDH). When the victim computes the shared secret as S = [victim_private_key]P via ECDH, this leaks information about victim_private_key mod (small_subgroup_order). For curves with cofactor > 1, this reveals the least significant bits of the private key. When these weak public keys are used in ECDSA , it's easy to forge signatures on the small subgroup. Only SECT curves are impacted by this. This vulnerability is fixed in 46.0.5.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.2بالا | 4.0 | CVEProject cvelistV5 (CNA) (GitHub_M) | CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
| 7.4بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Red Hat | OpenShift Lightspeed | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Lightspeed | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Satellite 6 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Satellite 6 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Satellite 6 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Satellite 6 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Satellite 6 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Trusted Artifact Signer | همه | CVEProject cvelistV5 (CNA) |
| pyca | cryptography | < 46.0.5 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۲۶- https://github.com/pyca/cryptography/security/advisories/GHSA-r6ph-v2qm-q3c2 x_refsource_CONFIRM
- https://github.com/pyca/cryptography/commit/0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c x_refsource_MISC
- http://www.openwall.com/lists/oss-security/2026/02/10/4
- https://access.redhat.com/security/cve/CVE-2026-26007 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2438762 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26007.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:13512 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:12176 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22330 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21517 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21431 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13672 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19355 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6308 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13553 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13545 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6309 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:2694 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:7295 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10184 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:5665 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6568 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6497 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6567 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:5168 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22993 vendor-advisoryx_refsource_REDHAT
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۱۱/۲۲
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۶/۲۵
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- GitHub_M
پیش‌بینی بهره‌برداری (EPSS)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- جزئی
ضعف‌ها (CWE)
- CWE-345Insufficient Verification of Data Authenticity
- CWE-354Improper Validation of Integrity Check Value