Changeflow GovPing Data Privacy & Cybersecurity Multiple Security Vulnerabilities in Python All...
Priority review Notice Added Final

Multiple Security Vulnerabilities in Python Allow Security Bypass

Favicon for www.cert.ssi.gouv.fr CERT-FR Security Advisories
Published
Detected
Email

Summary

CERT-FR issued advisory CERTFR-2026-AVI-0426 on April 13, 2026, alerting that multiple vulnerabilities were discovered in Python (CPython). These vulnerabilities allow attackers to cause security policy bypass and unspecified security issues. Affected systems are CPython installations without the latest security patches. Two CVEs are referenced: CVE-2026-1502 and CVE-2026-3446.

View original document View source feed page

What changed

CERT-FR published a security advisory regarding multiple vulnerabilities discovered in Python. The vulnerabilities affect CPython without the latest security patches and enable attackers to bypass security policies or cause unspecified security issues. The advisory references two Python security bulletins published on April 10, 2026, and cites CVEs CVE-2026-1502 and CVE-2026-3446.

Organizations using Python should immediately review their CPython installations and apply the latest security patches from the official Python security bulletins. Given the security bypass risk, organizations should treat this as a priority security update requiring prompt patching. Further details on specific attack vectors and patches are available in the referenced Python security bulletins and CVE records.

What to do next

  1. Apply latest Python security patches to affected CPython installations
  2. Consult Python security bulletins 2IVPAEQWUJBCTQZEJEVTYCIKSMQPGRZ3 and F5ZT5ICGJ6CKXVUJ34YBVY7WOZ5SHG53 for patch details
  3. Review CVE-2026-1502 and CVE-2026-3446 for specific vulnerability details

Archived snapshot

Apr 13, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 13 avril 2026 N° CERTFR-2026-AVI-0426 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Multiples vulnérabilités dans Python

Gestion du document

| Référence | CERTFR-2026-AVI-0426 |
| Titre | Multiples vulnérabilités dans Python |
| Date de la première version | 13 avril 2026 |
| Date de la dernière version | 13 avril 2026 |
| Source(s) | Bulletin de sécurité Python 2IVPAEQWUJBCTQZEJEVTYCIKSMQPGRZ3 du 10 avril 2026
Bulletin de sécurité Python F5ZT5ICGJ6CKXVUJ34YBVY7WOZ5SHG53 du 10 avril 2026 |
Une gestion de version détaillée se trouve à la fin de ce document.

Risques

  • Contournement de la politique de sécurité
  • Non spécifié par l'éditeur

Systèmes affectés

  • CPython sans les derniers correctifs de sécurité

Résumé

De multiples vulnérabilités ont été découvertes dans Python. Elles permettent à un attaquant de provoquer un contournement de la politique de sécurité et un problème de sécurité non spécifié par l'éditeur.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Documentation

Gestion détaillée du document

  1. le 13 avril 2026 Version initiale

Related changes

Favicon for www.cert.ssi.gouv.fr Multiple Vulnerabilities in Tenable Security Center Allow Remote Code Execution
Priority review Apr 10, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Multiple .NET Vulnerabilities Allow DoS and Security Bypass
Urgent Apr 15, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Multiple Microsoft Office Vulnerabilities Allow Remote Code Execution, Data Breach
Priority review Apr 15, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity

Get daily alerts for CERT-FR Security Advisories

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

Source

Favicon for www.cert.ssi.gouv.fr
CERT-FR Security Advisories cert.ssi.gouv.fr/avis
Data Privacy & Cybersecurity

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from CERT-FR.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Press inquiries →

Classification

Agency
CERT-FR
Published
April 13th, 2026
Instrument
Notice
Legal weight
Non-binding
Stage
Final
Change scope
Substantive
Document ID
CERTFR-2026-AVI-0426

Who this affects

Applies to
Technology companies Government agencies Manufacturers
Industry sector
5112 Software & Technology
Activity scope
Software vulnerability remediation Security patch management Systems patching
Geographic scope
France FR

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Compliance frameworks
NIST CSF
Topics
Data Privacy Software & Technology

Browse Categories

Agriculture & Food Safety 64 AI Regulation 3 Banking & Finance 292 Consumer Protection 44 Courts & Legal 361 Data Privacy & Cybersecurity 76 Defense & National Security 51 Education 21 Energy 100 Environment 86 Environmental & Energy 4 Environmental Regulation 7 Financial Regulation 2 Government & Legislation 279 Government Operations 2 Healthcare 136 Healthcare & Life Sciences 3 Housing 16 Immigration 8 Immigration & Border Control 1 Insurance 58 Labor & Employment 113 Legal & Judicial 5 Pharma & Drug Safety 104 Public Health 2 Real Estate & Housing 2 Sanctions & Export Controls 1 Securities & Markets 103 Securities Regulation 6 Tax 65 Telecom & Technology 47 Trade & Commerce 2 Trade & Sanctions 135 Transportation 58

Get alerts for this source

We'll email you when CERT-FR Security Advisories publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!