CVE-2026-27448: pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback

Overview

Severity

N/A

Exploit Status

Not Exploited

Patch Tuesday

2026-Mar

Released

2026-03-19

EPSS Score

0.04% (percentile: 11.8%)

Affected Products (2)

Other

• 21066-17084
• 21067-17086

Revision History

• 2026-03-19: Information published.