CVE-2026-1703
pythonVulnerabilityCVSS 2.0Patched
No public exploitation has been reported so far. A fixed version is available (see the table below).
Recommended action: Update to the fixed version listed for your distribution using the native package manager.
Severity metrics
CVSS 4.0 : 2.0 LOW
Attack vectorNetwork (remote)
Attack complexityLow
Attack requirementsPresent
Privileges requiredLow
User interactionActive
Confidentiality impactNone
Integrity impactLow
Availability impactNone
Subsequent confidentialityNone
Subsequent integrityNone
Subsequent availabilityNone
Vector: AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Affected & fixed versions by distribution
Versions are the native distribution strings (backport-aware): RHEL/Debian/SUSE backport fixes, so compare with the distro version comparator (dpkg / rpm / vercmp), not the upstream version.
| Distribution | Package | Affected | Fixed version | Status |
|---|---|---|---|---|
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | python | - | 2.7.18-150000.120.1 | fixed |
| SUSE:Linux Enterprise Server 12 SP5-LTSS | python | - | 2.7.18-33.79.1 | fixed |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | python | - | 2.7.18-33.79.1 | fixed |