CVE-2026-26007 json
cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves
published 2026-02-10 8 mo ago modified 2026-09-16 54 d ago also EUVD-2026-6238 , GHSA-r6ph-v2qm-q3c2 , PYSEC-2026-2141
- cvss
- 7.4
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 32%
- public exploits
- 0
- none known
Summary
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the public_key_from_numbers (or EllipticCurvePublicNumbers.public_key()), EllipticCurvePublicNumbers.public_key(), load_der_public_key() and load_pem_public_key() functions do not verify that the point belongs to the expected prime-order subgroup of the curve. This missing validation allows an attacker to provide a public key point P from a small-order subgroup. This can lead to security issues in various situations, such as the most commonly used signature verification (ECDSA) and shared key negotiation (ECDH). When the victim computes the shared secret as S = [victim_private_key]P via ECDH, this leaks information about victim_private_key mod (small_subgroup_order). For curves with cofactor > 1, this reveals the least significant bits of the private key. When these weak public keys are used in ECDSA , it's easy to forge signatures on the small subgroup. Only SECT curves are impacted by this. This vulnerability is fixed in 46.0.5.
Patch / fix
- pypi cryptography 46.0.5
- Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 0:4.6.28-3.el8ap
- Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9 0:4.6.28-3.el9ap
- Red Hat Red Hat Enterprise Linux 8 0:4.2.1-129.el8_10.25
- Red Hat Red Hat Enterprise Linux 9 0:4.10.0-98.el9_7.12, 0:4.10.0-110.el9_8.2
- Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 0:4.10.0-43.el9_2.21
- Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support 0:4.10.0-62.el9_4.24
- Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support 0:4.10.0-86.el9_6.16
- Red Hat Red Hat Ansible Automation Platform 2.5 1774414699, 1774446874, 1777403872
- Red Hat Red Hat Ansible Automation Platform 2.6 1774363040, 1774417022, 1774644659, 1777296732, 1777311601, 1777387242, 1777398576
- Red Hat Red Hat Discovery 2 1770913597
- Red Hat Red Hat Hardened Images 46.0.7-1.hum1
- Red Hat Red Hat OpenShift AI 2.25 1776243238, 1776243239, 1776243249, 1776243299, 1776243309, 1776257621, 1776318795, 1776319179, 1776319185, 1776319190, 1776319193, 1776319200, 1776319213, 1776319275, 1776319453, 1776336534, 1776336652, 1776338381, 1776343111, 1776413275
- Red Hat Red Hat Quay 3.10 1773971077
- Red Hat Red Hat Quay 3.15 1775169219
- Red Hat Red Hat Quay 3.16 1775069491, 1775169226
- Red Hat Red Hat Quay 3.9 1773936323
- Red Hat Red Hat Satellite 6.18 1780492008
- python-cryptography Debian 13 43.0.0-3+deb13u1
- python-cryptography Debian 14 46.0.5-1
debian advisories DEBIAN-CVE-2026-26007
- python-cryptography Ubuntu 22.04 LTS 3.4.8-1ubuntu2.3
- python-cryptography Ubuntu 24.04 LTS 41.0.7-4ubuntu0.3
- python-cryptography Ubuntu 25.10 43.0.0-1ubuntu1.1
- python-cryptography Ubuntu Pro 16.04 LTS 1.2.3-1ubuntu0.3+esm3
- python-cryptography Ubuntu Pro 18.04 LTS 2.1.4-1ubuntu1.4+esm3
- python-cryptography Ubuntu Pro 20.04 LTS 2.8-3ubuntu0.3+esm2
ubuntu advisories UBUNTU-CVE-2026-26007
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- fence-agents RHEL 9 4.10.0-110.el9_8.2
- fence-virt RHEL 9 4.10.0-110.el9_8.2
- fence-virtd RHEL 9 4.10.0-110.el9_8.2
- fence-virtd-cpg RHEL 9 4.10.0-110.el9_8.2
- fence-virtd-tcp RHEL 9 4.10.0-110.el9_8.2
- fence-agents-all RHEL 9 4.10.0-110.el9_8.2
- fence-agents-apc RHEL 9 4.10.0-110.el9_8.2
- fence-agents-aws RHEL 9 4.10.0-110.el9_8.2
red hat advisories RHSA-2026:22330RHSA-2026:21517RHSA-2026:21431RHSA-2026:19355RHSA-2026:13672RHSA-2026:13512
- python-cryptography SLES 16.0, Linux Micro 6.2, SLES for SAP applications 16.0 44.0.3-160000.3.1
- python-cryptography Linux Micro 6.1 42.0.4-slfo.1.1_3.1
- python-cryptography Linux Micro 6.0 42.0.4-3.1
suse advisories SUSE-SU-2026:21021-1SUSE-SU-2026:21165-1SUSE-SU-2026:20655-1SUSE-SU-2026:20706-1
- oci-cli openSUSE Tumbleweed 3.76.2-1.1
- python-cryptography openSUSE Leap 16.0 44.0.3-160000.3.1
- python-cryptography openSUSE Tumbleweed 46.0.5-1.1
opensuse advisories openSUSE-SU-2026:10539-1openSUSE-SU-2026:20506-1openSUSE-SU-2026:10205-1
- fence-agents-all AlmaLinux 8 4.2.1-129.el8_10.25
- fence-agents-apc AlmaLinux 8 4.2.1-129.el8_10.25
- fence-agents-aws AlmaLinux 8 4.2.1-129.el8_10.25
- fence-agents-eps AlmaLinux 8 4.2.1-129.el8_10.25
- fence-agents-gce AlmaLinux 8 4.2.1-129.el8_10.25
- fence-agents-rsa AlmaLinux 8 4.2.1-129.el8_10.25
- fence-agents-rsb AlmaLinux 8 4.2.1-129.el8_10.25
- fence-agents-sbd AlmaLinux 8 4.2.1-129.el8_10.25
almalinux advisories ALSA-2026:12176
- fence-agents Rocky Linux 9 4.10.0-110.el9_8.2
- fence-agents Rocky Linux 9 4.10.0-98.el9_7.12
- fence-agents Rocky Linux 8 4.2.1-129.el8_10.25
rocky linux advisories RLSA-2026:19355RLSA-2026:13672RLSA-2026:12176
- py3-cryptography Alpine 3.24, Alpine 3.23 46.0.5-r0
alpine advisories ALPINE-CVE-2026-26007
Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- python-cryptography Azure Linux 3.0 42.0.5-4
azure linux advisories AZL-77454
Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2026-26007 updated cvss 7.4
cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves
-
Red Hat Exploit Intelligence exploit-intelligence/vulnerability-analysis-rhel9 Red Hat Migration Toolkit for Applications 8 mta/mta-solution-server-rhel9 Red Hat OpenShift Lightspeed openshift-lightspeed/lightspeed-ocp-rag-rhel9, openshift-lightspeed/lightspeed-service-api-rhel9affected: workaround, no fix available
-
Red Hat Ansible Automation Platform 2 ansible-automation-platform-26/gateway-rhel9, ansible-automation-platform-24/controller-rhel8, ansible-automation-platform-26/controller-rhel9, ansible-automation-platform/automation-dashboard-rhel9, ansible-automation-platform-tech-preview/automation-dashboard-rhel9 Red Hat OpenShift AI (RHOAI) rhoai/odh-llama-stack-core-rhel9, rhoai/odh-trustyai-ragas-lls-provider-dsp-rhel9affected: workaround, no fix available, no fix planned “Will not fix”
-
Red Hat OpenShift Container Platform 5 openshift/ose-rhel-coreos-9 Red Hat Satellite 6 python3-cryptography, python3.12-cryptography, python-cryptography 42.0.5-1.el9ap, satellite/iop-advisor-engine-rhel9, satellite/iop-host-inventory-rhel9, satellite/iop-insights-engine-rhel9 Red Hat Trusted Artifact Signer rhtas/model-transparency-rhel9affected: workaround, no fix available
-
Red Hat Ansible Automation Platform 2.5 ansible-automation-platform-25 1774414699, ansible-automation-platform-25 1774446874, ansible-automation-platform-25 1777403872fixed: vendor fix RHSA-2026:6308
-
Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-controller-venv-tower 4.6.28-3.el8ap Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-controller-venv-tower 4.6.28-3.el9apfixed: vendor fix RHSA-2026:13512
-
Red Hat Ansible Automation Platform 2.6 ansible-automation-platform-26 1774363040, ansible-automation-platform-26 1774417022, ansible-automation-platform-26 1774644659, ansible-automation-platform-26 1777296732, ansible-automation-platform-26 1777311601, ansible-automation-platform-26 1777387242, +1 morefixed: vendor fix RHSA-2026:13545
-
Red Hat Discovery 2 discovery 1770913597fixed: vendor fix RHSA-2026:2694
-
Red Hat Enterprise Linux AppStream (v. 8) fence-agents 4.2.1-129.el8_10.25, fence-agents-all 4.2.1-129.el8_10.25, fence-agents-apc 4.2.1-129.el8_10.25, fence-agents-eps 4.2.1-129.el8_10.25, fence-agents-rsa 4.2.1-129.el8_10.25, fence-agents-rsb 4.2.1-129.el8_10.25, +38 morefixed: vendor fix RHSA-2026:12176
show 21 moreshow fewer
-
Red Hat Enterprise Linux AppStream (v. 9) fence-virt 4.10.0-110.el9_8.2, fence-virt 4.10.0-98.el9_7.12, fence-virtd 4.10.0-110.el9_8.2, fence-virtd 4.10.0-98.el9_7.12, fence-agents 4.10.0-110.el9_8.2, fence-agents 4.10.0-98.el9_7.12, +108 morefixed: vendor fix RHSA-2026:13672
-
Red Hat Enterprise Linux AppStream E4S (v.9.2) fence-virt 4.10.0-43.el9_2.21, fence-virtd 4.10.0-43.el9_2.21, fence-agents 4.10.0-43.el9_2.21, fence-virtd-cpg 4.10.0-43.el9_2.21, fence-virtd-tcp 4.10.0-43.el9_2.21, fence-agents-virsh 4.10.0-43.el9_2.21, +8 morefixed: vendor fix RHSA-2026:22330
-
Red Hat Enterprise Linux AppStream EUS (v.9.4) fence-virt 4.10.0-62.el9_4.24, fence-virtd 4.10.0-62.el9_4.24, fence-agents 4.10.0-62.el9_4.24, fence-virtd-cpg 4.10.0-62.el9_4.24, fence-virtd-tcp 4.10.0-62.el9_4.24, fence-agents-virsh 4.10.0-62.el9_4.24, +8 morefixed: vendor fix RHSA-2026:21517
-
Red Hat Enterprise Linux AppStream EUS (v.9.6) fence-virt 4.10.0-86.el9_6.16, fence-virtd 4.10.0-86.el9_6.16, fence-agents 4.10.0-86.el9_6.16, fence-virtd-cpg 4.10.0-86.el9_6.16, fence-virtd-tcp 4.10.0-86.el9_6.16, fence-agents-all 4.10.0-86.el9_6.16, +51 morefixed: vendor fix RHSA-2026:21431
-
Red Hat Enterprise Linux High Availability E4S (v.9.2) fence-agents-all 4.10.0-43.el9_2.21, fence-agents-apc 4.10.0-43.el9_2.21, fence-agents-aws 4.10.0-43.el9_2.21, fence-agents-eps 4.10.0-43.el9_2.21, fence-agents-gce 4.10.0-43.el9_2.21, fence-agents-rsa 4.10.0-43.el9_2.21, +37 morefixed: vendor fix RHSA-2026:22330
-
Red Hat Enterprise Linux High Availability EUS (v.9.4) fence-agents-all 4.10.0-62.el9_4.24, fence-agents-apc 4.10.0-62.el9_4.24, fence-agents-aws 4.10.0-62.el9_4.24, fence-agents-eps 4.10.0-62.el9_4.24, fence-agents-gce 4.10.0-62.el9_4.24, fence-agents-rsa 4.10.0-62.el9_4.24, +37 morefixed: vendor fix RHSA-2026:21517
-
Red Hat Enterprise Linux HighAvailability (v. 8) fence-agents-aws 4.2.1-129.el8_10.25, fence-agents-gce 4.2.1-129.el8_10.25, fence-agents-aliyun 4.2.1-129.el8_10.25, fence-agents-azure-arm 4.2.1-129.el8_10.25, fence-agents-openstack 4.2.1-129.el8_10.25fixed: vendor fix RHSA-2026:12176
-
Red Hat Enterprise Linux Resilient Storage E4S (v.9.2) fence-agents-all 4.10.0-43.el9_2.21, fence-agents-apc 4.10.0-43.el9_2.21, fence-agents-aws 4.10.0-43.el9_2.21, fence-agents-eps 4.10.0-43.el9_2.21, fence-agents-gce 4.10.0-43.el9_2.21, fence-agents-rsa 4.10.0-43.el9_2.21, +36 morefixed: vendor fix RHSA-2026:22330
-
Red Hat Enterprise Linux Resilient Storage EUS (v.9.4) fence-agents-all 4.10.0-62.el9_4.24, fence-agents-apc 4.10.0-62.el9_4.24, fence-agents-aws 4.10.0-62.el9_4.24, fence-agents-eps 4.10.0-62.el9_4.24, fence-agents-gce 4.10.0-62.el9_4.24, fence-agents-rsa 4.10.0-62.el9_4.24, +36 morefixed: vendor fix RHSA-2026:21517
-
Red Hat Enterprise Linux ResilientStorage (v. 8) fence-agents-aws 4.2.1-129.el8_10.25, fence-agents-gce 4.2.1-129.el8_10.25, fence-agents-aliyun 4.2.1-129.el8_10.25, fence-agents-azure-arm 4.2.1-129.el8_10.25, fence-agents-openstack 4.2.1-129.el8_10.25fixed: vendor fix RHSA-2026:12176
-
Red Hat Hardened Images python-cryptography 46.0.7-1.hum1fixed: vendor fix RHSA-2026:7295
-
Red Hat OpenShift AI 2.25 rhoai 1776243238, rhoai 1776243239, rhoai 1776243249, rhoai 1776243299, rhoai 1776243309, rhoai 1776257621, +14 morefixed: vendor fix RHSA-2026:10184
-
Red Hat OpenShift AI 3.4 rhoai/odh-kserve-controller-rhel9 1792685196, rhoai/odh-training-cuda128-torch29-py312-rhel9 1792890022, rhoai/odh-trustyai-nemo-guardrails-server-rhel9 1793001780fixed: vendor fix RHSA-2026:92510
-
Red Hat OpenShift Container Platform 4.22 rhcos 4.22.9.8.202611032353fixed: vendor fix RHSA-2026:95346
-
Red Hat Quay 3.9 quay 1773936323fixed: vendor fix RHSA-2026:5168
-
Red Hat Quay 3.10 quay 1773971077fixed: vendor fix RHSA-2026:5665
-
Red Hat Quay 3.15 quay 1775169219fixed: vendor fix RHSA-2026:6568
-
Red Hat Quay 3.16 quay 1775069491, quay 1775169226fixed: vendor fix RHSA-2026:6497
-
Red Hat Satellite 6.18 satellite/foreman-mcp-server-rhel9 1780492008fixed: vendor fix RHSA-2026:22993
-
Red Hat Satellite 6.19 satellite/iop-vmaas-rhel9 1793197872fixed: vendor fix RHSA-2026:92574
-
Red Hat Ansible Automation Orchestrator 2026 ansible-automation-platform/automation-orchestrator-backend-rhel9 Red Hat Confidential Compute Attestation openshift-sandboxed-containers/osc-podvm-builder-rhel9 Red Hat Lightspeed Core lightspeed-core/rag-tool-cpu-rhel9, lightspeed-core/lightspeed-stack-rhel9, lightspeed-core/rag-tool-cuda-12.9-rhel9 Red Hat Lightspeed Services for Advanced Cluster Management lightspeed-services-acm/ocp-rules-rhel9 Red Hat OpenShift Lightspeed openshift-lightspeed/lightspeed-agentic-sandbox-rhel9 Red Hat Pen Drive Powered by Red Hat Lightspeed pen-drive/pen-drive-scanner-rhel9not affected: vulnerable code not present
26 more not affected in the full advisory
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 8 mo ago
Exploit prediction
0.38% chance of exploitation in the next 30 days, higher than 32% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 8.2 | CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
| CISA ADP | 3.1 | 7.4 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N |
| CNA | 4.0 | 8.2 | CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| NVD | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
| CNA | 3.1 | 7.4 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N |
| OSV | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | cryptography | <46.0.5 |
46.0.5 |
Affected products
- pyca cryptography
- Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8
- Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9
- Red Hat Red Hat Enterprise Linux 8
- Red Hat Red Hat Enterprise Linux 9
- Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
- Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support
- Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support
- Red Hat Red Hat Ansible Automation Platform 2.5
- Red Hat Red Hat Ansible Automation Platform 2.6
- Red Hat Red Hat Discovery 2
- Red Hat Red Hat Hardened Images
- Red Hat Red Hat OpenShift AI 2.25
- Red Hat Red Hat Quay 3.10
- Red Hat Red Hat Quay 3.15
- Red Hat Red Hat Quay 3.16
- Red Hat Red Hat Quay 3.9
- Red Hat Red Hat Satellite 6.18
- Red Hat OpenShift Lightspeed
- Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
- Red Hat Red Hat Ansible Automation Platform 2
- Red Hat Red Hat Ansible Automation Platform Ansible Core 2
- Red Hat Red Hat Enterprise Linux 10
- Red Hat Red Hat OpenShift AI (RHOAI)
- Red Hat Red Hat Satellite 6
- Red Hat Red Hat Trusted Artifact Signer
Classification
References
-
github.com
/pyca/cryptography/commit/0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c
web, patch
-
access.redhat.com
/errata/RHSA-2026:13512
vendor-advisory, advisory
-
access.redhat.com
/errata/RHSA-2026:12176
vendor-advisory, advisory
-
access.redhat.com
/errata/RHSA-2026:22330
vendor-advisory, advisory
-
access.redhat.com
/errata/RHSA-2026:21517
vendor-advisory, advisory
-
access.redhat.com
/errata/RHSA-2026:21431
vendor-advisory, advisory
-
access.redhat.com
/errata/RHSA-2026:13672
vendor-advisory, advisory
-
access.redhat.com
/errata/RHSA-2026:19355
vendor-advisory, advisory
-
access.redhat.com
/errata/RHSA-2026:6308
vendor-advisory, advisory
-
access.redhat.com
/errata/RHSA-2026:13553
vendor-advisory, advisory
-
access.redhat.com
/errata/RHSA-2026:13545
vendor-advisory, advisory
-
access.redhat.com
/errata/RHSA-2026:6309
vendor-advisory, advisory
-
access.redhat.com
/errata/RHSA-2026:2694
vendor-advisory, advisory
-
access.redhat.com
/errata/RHSA-2026:7295
vendor-advisory, advisory
-
access.redhat.com
/errata/RHSA-2026:10184
vendor-advisory, advisory
-
access.redhat.com
/errata/RHSA-2026:5665
vendor-advisory, advisory
-
access.redhat.com
/errata/RHSA-2026:6568
vendor-advisory, advisory
-
access.redhat.com
/errata/RHSA-2026:6497
vendor-advisory, advisory
-
access.redhat.com
/errata/RHSA-2026:6567
vendor-advisory, advisory
-
access.redhat.com
/errata/RHSA-2026:5168
vendor-advisory, advisory
-
access.redhat.com
/errata/RHSA-2026:22993
vendor-advisory, advisory
-
github.com
/pyca/cryptography/security/advisories/GHSA-r6ph-v2qm-q3c2
web, vendor-advisory, advisory
-
openwall.com
/lists/oss-security/2026/02/10/4
web, mailing-list, third-party-advisory, advisory
-
access.redhat.com
/security/cve/CVE-2026-26007
vdb-entry, web
-
bugzilla.redhat.com
/show_bug.cgi?id=2438762
issue-tracking, report
-
security.access.redhat.com
/data/csaf/v2/vex/2026/cve-2026-26007.json
web
-
nvd.nist.gov
/vuln/detail/CVE-2026-26007
advisory
-
github.com
/pyca/cryptography
package
-
github.com
/pyca/cryptography/releases/tag/46.0.5
web
Sources
- CVE List CVE-2026-26007
- GitHub Advisory GHSA-r6ph-v2qm-q3c2
- NVD CVE-2026-26007
- OSV PYSEC-2026-2141
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.