High severity7.5NVD Advisory· Published Mar 16, 2026· Updated Aug 13, 2026

CVE-2026-3644

Description

The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

151

Python (programming language)/Python10 versions
cpe:2.3:a:python:python:*:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:python:python:*:*:*:*:*:*:*:*range: <3.13.13
- cpe:2.3:a:python:python:3.15.0:alpha1:*:*:*:*:*:*
- cpe:2.3:a:python:python:3.15.0:alpha2:*:*:*:*:*:*
- cpe:2.3:a:python:python:3.15.0:alpha3:*:*:*:*:*:*
- cpe:2.3:a:python:python:3.15.0:alpha4:*:*:*:*:*:*
- cpe:2.3:a:python:python:3.15.0:alpha5:*:*:*:*:*:*
- cpe:2.3:a:python:python:3.15.0:alpha6:*:*:*:*:*:*
- cpe:2.3:a:python:python:3.15.0:alpha7:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 0
osv-coords141 versions
pkg:apk/chainguard/python-3.11 pkg:apk/chainguard/python-3.13 pkg:apk/chainguard/python-3.14 pkg:apk/wolfi/python-3.11 pkg:apk/wolfi/python-3.13 pkg:apk/wolfi/python-3.14 pkg:bitnami/python pkg:bitnami/python-min pkg:rpm/almalinux/python-unversioned-command pkg:rpm/almalinux/python3 pkg:rpm/almalinux/python3-debug pkg:rpm/almalinux/python3-devel pkg:rpm/almalinux/python3-idle pkg:rpm/almalinux/python3-libs pkg:rpm/almalinux/python3-test pkg:rpm/almalinux/python3-tkinter pkg:rpm/almalinux/python3.12 pkg:rpm/almalinux/python3.12-debug pkg:rpm/almalinux/python3.12-devel pkg:rpm/almalinux/python3.12-idle pkg:rpm/almalinux/python3.12-libs pkg:rpm/almalinux/python3.12-rpm-macros pkg:rpm/almalinux/python3.12-test pkg:rpm/almalinux/python3.12-tkinter pkg:rpm/almalinux/python3.14 pkg:rpm/almalinux/python3.14-debug pkg:rpm/almalinux/python3.14-devel pkg:rpm/almalinux/python3.14-freethreading pkg:rpm/almalinux/python3.14-freethreading-debug pkg:rpm/almalinux/python3.14-freethreading-devel pkg:rpm/almalinux/python3.14-freethreading-idle pkg:rpm/almalinux/python3.14-freethreading-libs pkg:rpm/almalinux/python3.14-freethreading-test pkg:rpm/almalinux/python3.14-freethreading-tkinter pkg:rpm/almalinux/python3.14-idle pkg:rpm/almalinux/python3.14-libs pkg:rpm/almalinux/python3.14-test pkg:rpm/almalinux/python3.14-tkinter pkg:rpm/opensuse/python&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/python-base&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/python-doc&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/python310&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/python310&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/python310-core&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/python310-documentation&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/python311&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/python311&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/python311-core&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/python311-documentation&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/python312&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/python312&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/python312-core&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/python312-documentation&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/python313&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/python313&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/python313-core&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/python313-documentation&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/python313-nogil&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/python313-nogil-nogil-core&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/python314&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/python315&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/python39&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/python39-core&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/python39-documentation&distro=openSUSE%20Leap%2015.6 pkg:rpm/suse/python&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7 pkg:rpm/suse/python&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS pkg:rpm/suse/python&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5 pkg:rpm/suse/python-base&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7 pkg:rpm/suse/python-base&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS pkg:rpm/suse/python-base&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5 pkg:rpm/suse/python-doc&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS pkg:rpm/suse/python-doc&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5 pkg:rpm/suse/python3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS pkg:rpm/suse/python3&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5 pkg:rpm/suse/python3-base&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS pkg:rpm/suse/python3-base&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5 pkg:rpm/suse/python310&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/python310&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/python310&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/python310&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/python310-core&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/python310-core&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/python310-core&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/python310-core&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/python311&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/python311&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/python311&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/python311&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/python311&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4 pkg:rpm/suse/python311&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Python%203%2015%20SP7 pkg:rpm/suse/python311&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/python311&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/python311&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS pkg:rpm/suse/python311&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/python311&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/python311&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6 pkg:rpm/suse/python311&distro=SUSE%20Linux%20Micro%206.1 pkg:rpm/suse/python311-core&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/python311-core&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/python311-core&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/python311-core&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/python311-core&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7 pkg:rpm/suse/python311-core&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4 pkg:rpm/suse/python311-core&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Python%203%2015%20SP7 pkg:rpm/suse/python311-core&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/python311-core&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/python311-core&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS pkg:rpm/suse/python311-core&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/python311-core&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/python311-core&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6 pkg:rpm/suse/python311-core&distro=SUSE%20Linux%20Micro%206.1 pkg:rpm/suse/python311-documentation&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/python311-documentation&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/python311-documentation&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/python311-documentation&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/python311-documentation&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/python311-documentation&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/python311-documentation&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/python311-documentation&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/python312&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS pkg:rpm/suse/python312&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6 pkg:rpm/suse/python312-core&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS pkg:rpm/suse/python312-core&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6 pkg:rpm/suse/python313&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Python%203%2015%20SP7 pkg:rpm/suse/python313&distro=SUSE%20Linux%20Enterprise%20Server%2016.0 pkg:rpm/suse/python313&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0 pkg:rpm/suse/python313&distro=SUSE%20Linux%20Micro%206.2 pkg:rpm/suse/python313-core&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Python%203%2015%20SP7 pkg:rpm/suse/python313-core&distro=SUSE%20Linux%20Enterprise%20Server%2016.0 pkg:rpm/suse/python313-core&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0 pkg:rpm/suse/python313-core&distro=SUSE%20Linux%20Micro%206.2 pkg:rpm/suse/python313-documentation&distro=SUSE%20Linux%20Enterprise%20Server%2016.0 pkg:rpm/suse/python313-documentation&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0 pkg:rpm/suse/python36&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS pkg:rpm/suse/python36&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5 pkg:rpm/suse/python36-core&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS pkg:rpm/suse/python36-core&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5 pkg:rpm/suse/python39&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/python39&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/python39-core&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/python39-core&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5
< 3.11.15-r9+ 140 more
- (no CPE)range: < 3.11.15-r9
- (no CPE)range: < 3.13.12-r7
- (no CPE)range: < 3.14.3-r6
- (no CPE)range: < 3.11.15-r9
- (no CPE)range: < 3.13.12-r7
- (no CPE)range: < 3.14.3-r6
- (no CPE)range: < 3.15.0
- (no CPE)range: < 3.15.0
- (no CPE)range: < 3.12.13-2.el10_2
- (no CPE)range: < 3.12.13-2.el10_2
- (no CPE)range: < 3.12.13-2.el10_2
- (no CPE)range: < 3.12.13-2.el10_2
- (no CPE)range: < 3.12.13-2.el10_2
- (no CPE)range: < 3.12.13-2.el10_2
- (no CPE)range: < 3.12.13-2.el10_2
- (no CPE)range: < 3.12.13-2.el10_2
- (no CPE)range: < 3.12.13-2.el8_10
- (no CPE)range: < 3.12.13-2.el8_10
- (no CPE)range: < 3.12.13-2.el8_10
- (no CPE)range: < 3.12.13-2.el8_10
- (no CPE)range: < 3.12.13-2.el8_10
- (no CPE)range: < 3.12.13-2.el8_10
- (no CPE)range: < 3.12.13-2.el8_10
- (no CPE)range: < 3.12.13-2.el8_10
- (no CPE)range: < 3.14.4-2.el10_2
- (no CPE)range: < 3.14.4-2.el10_2
- (no CPE)range: < 3.14.4-2.el10_2
- (no CPE)range: < 3.14.4-2.el10_2
- (no CPE)range: < 3.14.4-2.el10_2
- (no CPE)range: < 3.14.4-2.el10_2
- (no CPE)range: < 3.14.4-2.el10_2
- (no CPE)range: < 3.14.4-2.el10_2
- (no CPE)range: < 3.14.4-2.el10_2
- (no CPE)range: < 3.14.4-2.el10_2
- (no CPE)range: < 3.14.4-2.el10_2
- (no CPE)range: < 3.14.4-2.el10_2
- (no CPE)range: < 3.14.4-2.el10_2
- (no CPE)range: < 3.14.4-2.el10_2
- (no CPE)range: < 2.7.18-150000.111.1
- (no CPE)range: < 2.7.18-150000.111.1
- (no CPE)range: < 2.7.18-150000.111.1
- (no CPE)range: < 3.10.20-150400.4.107.1
- (no CPE)range: < 3.10.20-3.1
- (no CPE)range: < 3.10.20-150400.4.107.1
- (no CPE)range: < 3.10.20-150400.4.107.1
- (no CPE)range: < 3.11.15-150600.3.53.1
- (no CPE)range: < 3.11.15-4.1
- (no CPE)range: < 3.11.15-150600.3.53.1
- (no CPE)range: < 3.11.15-150600.3.53.1
- (no CPE)range: < 3.12.13-150600.3.53.1
- (no CPE)range: < 3.12.13-4.1
- (no CPE)range: < 3.12.13-150600.3.53.1
- (no CPE)range: < 3.12.13-150600.3.53.1
- (no CPE)range: < 3.13.13-160000.1.1
- (no CPE)range: < 3.13.12-3.1
- (no CPE)range: < 3.13.13-160000.1.1
- (no CPE)range: < 3.13.13-160000.1.1
- (no CPE)range: < 3.13.13-160000.1.1
- (no CPE)range: < 3.13.13-160000.1.1
- (no CPE)range: < 3.14.3-4.1
- (no CPE)range: < 3.15.0~a7-3.1
- (no CPE)range: < 3.9.25-150300.4.99.1
- (no CPE)range: < 3.9.25-150300.4.99.1
- (no CPE)range: < 3.9.25-150300.4.99.1
- (no CPE)range: < 2.7.18-150000.111.1
- (no CPE)range: < 2.7.18-33.74.1
- (no CPE)range: < 2.7.18-33.74.1
- (no CPE)range: < 2.7.18-150000.111.1
- (no CPE)range: < 2.7.18-33.74.1
- (no CPE)range: < 2.7.18-33.74.1
- (no CPE)range: < 2.7.18-33.74.1
- (no CPE)range: < 2.7.18-33.74.1
- (no CPE)range: < 3.4.10-25.180.1
- (no CPE)range: < 3.4.10-25.180.1
- (no CPE)range: < 3.4.10-25.180.1
- (no CPE)range: < 3.4.10-25.180.1
- (no CPE)range: < 3.10.20-150400.4.107.1
- (no CPE)range: < 3.10.20-150400.4.107.1
- (no CPE)range: < 3.10.20-150400.4.107.1
- (no CPE)range: < 3.10.20-150400.4.107.1
- (no CPE)range: < 3.10.20-150400.4.107.1
- (no CPE)range: < 3.10.20-150400.4.107.1
- (no CPE)range: < 3.10.20-150400.4.107.1
- (no CPE)range: < 3.10.20-150400.4.107.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.11.15-150600.3.53.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.11.15-150600.3.53.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.11.15-150600.3.53.1
- (no CPE)range: < 3.11.15-slfo.1.1_3.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.11.15-150600.3.53.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.11.15-150600.3.53.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.11.15-150600.3.53.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.11.15-150600.3.53.1
- (no CPE)range: < 3.11.15-slfo.1.1_3.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.11.15-150400.9.85.1
- (no CPE)range: < 3.12.13-150600.3.53.1
- (no CPE)range: < 3.12.13-150600.3.53.1
- (no CPE)range: < 3.12.13-150600.3.53.1
- (no CPE)range: < 3.12.13-150600.3.53.1
- (no CPE)range: < 3.13.13-150700.4.45.1
- (no CPE)range: < 3.13.13-160000.1.1
- (no CPE)range: < 3.13.13-160000.1.1
- (no CPE)range: < 3.13.13-160000.1.1
- (no CPE)range: < 3.13.13-150700.4.45.1
- (no CPE)range: < 3.13.13-160000.1.1
- (no CPE)range: < 3.13.13-160000.1.1
- (no CPE)range: < 3.13.13-160000.1.1
- (no CPE)range: < 3.13.13-160000.1.1
- (no CPE)range: < 3.13.13-160000.1.1
- (no CPE)range: < 3.6.15-108.1
- (no CPE)range: < 3.6.15-108.1
- (no CPE)range: < 3.6.15-108.1
- (no CPE)range: < 3.6.15-108.1
- (no CPE)range: < 3.9.25-150300.4.99.1
- (no CPE)range: < 3.9.25-150300.4.99.1
- (no CPE)range: < 3.9.25-150300.4.99.1
- (no CPE)range: < 3.9.25-150300.4.99.1

Patches

Vulnerability mechanics

References

News mentions

No linked articles in our index yet.

Severity

HighCVSS v3.1

7.5/ 10

CVSS v46.0

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: High
Availability: None

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

Probability of exploitation in the next 30 days.

0.48%

VYPR risk score

Composite of severity, exploitation, and reach.

0.42medium

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000

Weaknesses

CWE-116
Improper Encoding or Escaping of Output
CWE-20
Improper Input Validation

CVE ID

CVE-2026-3644

Credits

VY
Vyom Yadav
reporter
SU
Stan Ulbrych
coordinator
SL
Seth Larson
remediation reviewer
SU
Stan Ulbrych
remediation developer
VS
Victor Stinner
remediation reviewer