CVE-2026-115774: Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH

Overview

Severity
Medium (CVSS 4.9)
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U
Exploit Status
Not Exploited
Patch Tuesday
2026-Oct
Released
2026-10-29
EPSS Score
0.43% (percentile: 37.2%)

Affected Products (1)

Open Source Software

  • azl3 python-twisted 22.10.0-6 on Azure Linux 3.0

Revision History

  • 2026-10-29: Information published.