Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()" API could have commands injected into the underlying shell. See CVE-2026-4519 for details.
CVSS Details
- CVSS 4.0 Base Score: 7 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade platform-pythonUpgrade python3-debugUpgrade python3.14-freethreading-idleUpgrade python3.12Upgrade python3.14-tkinterUpgrade python3.11-develUpgrade python3.11-idleUpgrade python3.11-rpm-macrosUpgrade python3-develUpgrade python3.14-freethreading-tkinterUpgrade python3-testUpgrade python3.14-libsUpgrade python3.11-debugUpgrade python3-tkinterUpgrade python3.12-tkinterUpgrade python3.14-freethreading-testUpgrade python3.14-idleUpgrade python3.12-libsUpgrade python3.12-rpm-macrosUpgrade python3.14-freethreadingUpgrade python3-idleUpgrade python3.11-tkinterUpgrade python3.11Upgrade python3.14-debugUpgrade python3.12-debugUpgrade python3.14-freethreading-develUpgrade python3.14Upgrade platform-python-develUpgrade python3.11-testUpgrade platform-python-debugUpgrade python3.14-freethreading-libsUpgrade python3Upgrade python3.12-idleUpgrade python-unversioned-commandUpgrade python3.14-develUpgrade python3.12-testUpgrade python3-libsUpgrade python3.12-develUpgrade python3.11-libsUpgrade python3.14-testUpgrade python3.14-freethreading-debug | Apr 29, 2026 | Apr 27, 2026 |
| Alpine Linux | — | Upgrade python3 | Aug 17, 2026 | Apr 13, 2026 |
| Amazon Linux Ami 2 | — | Upgrade python-develUpgrade python-toolsUpgrade python3Upgrade python-testUpgrade python3-testUpgrade python-libsUpgrade python-debuginfoUpgrade python3-toolsUpgrade python3-tkinterUpgrade python3-develUpgrade python3-libsUpgrade tkinterUpgrade pythonUpgrade python3-debuginfoUpgrade python-debugUpgrade python3-debug | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade python3.11-idleUpgrade python3.14-debugUpgrade python3.13-tkinterUpgrade python3.12-debuginfoUpgrade python3.13-develUpgrade python3-debugUpgrade python3.14-freethreading-debugUpgrade python3.11-libsUpgrade python3.14-freethreading-idleUpgrade python3-testUpgrade python3.14-develUpgrade python3.14-freethreading-tkinterUpgrade python3.11-debuginfoUpgrade python3.14-tkinterUpgrade python3.12-testUpgrade python3.13-freethreading-debugUpgrade python3.12-idleUpgrade python3.14-libsUpgrade python3.14-idleUpgrade python3.12-develUpgrade python3-libsUpgrade python3-tkinterUpgrade python3-idleUpgrade python3.12-debugUpgrade python3.11-testUpgrade python3.11-debugUpgrade python3.14-freethreading-libsUpgrade python3.11-debugsourceUpgrade python3.13-debuginfoUpgrade python3.11Upgrade python3Upgrade python3.12-debugsourceUpgrade python3.11-develUpgrade python3-develUpgrade python3.14-freethreading-testUpgrade python3.14-freethreadingUpgrade python3.14-debuginfoUpgrade python-unversioned-commandUpgrade python3.14-freethreading-develUpgrade python3.13-idleUpgrade python3.13-freethreadingUpgrade python3.12-tkinterUpgrade python3.12Upgrade python3.13-debugUpgrade python3.11-tkinterUpgrade python3.14Upgrade python3.13-libsUpgrade python3.13-debugsourceUpgrade python3.13Upgrade python3.12-libsUpgrade python3.9-debuginfoUpgrade python3.14-testUpgrade python3.9-debugsourceUpgrade python3.13-testUpgrade python3.14-debugsource | May 4, 2026 | Apr 13, 2026 |
| Freebsd | — | Upgrade python313Upgrade python314Upgrade python313tUpgrade python311Upgrade python312Upgrade python310 | Apr 17, 2026 | Apr 13, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jul 2, 2026 | Jul 1, 2026 |
| Oracle_linux | — | Upgrade python3.11-testUpgrade platform-python-debugUpgrade python3.11-idleUpgrade python3-idleUpgrade python3.11-libsUpgrade python3.12-idleUpgrade python3-debugUpgrade python3.12-testUpgrade python3.12-debugUpgrade python3.11-rpm-macrosUpgrade platform-python-develUpgrade python3.12Upgrade python3-develUpgrade python3.12-libsUpgrade python3-testUpgrade python3.11-develUpgrade python3.12-develUpgrade python3.12-tkinterUpgrade python3.11-debugUpgrade python3-libsUpgrade python3.11Upgrade python3.11-tkinterUpgrade python3Upgrade python3-tkinterUpgrade python3.12-rpm-macrosUpgrade python-unversioned-commandUpgrade platform-python | Apr 29, 2026 | Apr 13, 2026 |
| Redhat_linux | — | Upgrade python-libsUpgrade pythonUpgrade python3-develUpgrade python3.11-tkinterUpgrade python-debugUpgrade platform-python-develUpgrade python3.11-testUpgrade python3.11Upgrade python-debuginfoUpgrade python3.12-libsUpgrade python3.14-debugsourceUpgrade python3.12-rpm-macrosUpgrade python3.14-freethreading-develUpgrade python3.12-develUpgrade python3.9-debuginfoUpgrade python3.14-idleUpgrade python-toolsUpgrade python3.14-freethreadingUpgrade python3.14-freethreading-libsUpgrade python3.14-testUpgrade python3.14-debuginfoUpgrade python3.12-debugsourceUpgrade python3.11-debugUpgrade python3.11-develUpgrade python3.12-debugUpgrade python3.14-freethreading-testUpgrade python3.14-libsUpgrade python3.12-tkinterUpgrade python3-tkinterUpgrade python3.14Upgrade python3.9-debugsourceUpgrade python-unversioned-commandUpgrade python3-debuginfoUpgrade python3.11-debugsourceUpgrade python3.11-rpm-macrosUpgrade python3-idleUpgrade python3.12Upgrade python3Upgrade python3-libsUpgrade python3.14-debugUpgrade python3.14-freethreading-debugUpgrade python3.14-develUpgrade python3.12-debuginfoUpgrade platform-python-debugNo solution existsUpgrade python3.11-libsUpgrade python3.14-tkinterUpgrade python3-debugUpgrade python3-testUpgrade python3-debugsourceUpgrade python3.12-testUpgrade python-testUpgrade python-develUpgrade platform-pythonUpgrade python3.14-freethreading-idleUpgrade python3.11-debuginfoUpgrade tkinterUpgrade python3.14-freethreading-tkinterUpgrade python3.12-idleUpgrade python3.11-idle | Apr 28, 2026 | Apr 13, 2026 |
| Rocky_linux | — | Upgrade python3.14-debugsourceUpgrade python3.14-tkinterUpgrade python3.14-freethreading-idleUpgrade python3.12Upgrade python3.12-debuginfoUpgrade python3.12-tkinterUpgrade python3-develUpgrade python3.11-idleUpgrade python3.14-libsUpgrade python3-debugUpgrade python3-tkinterUpgrade python3.14-testUpgrade python3.14-freethreading-testUpgrade python3.11-debugUpgrade python3.11-debugsourceUpgrade python3.14-freethreading-tkinterUpgrade python3.11-develUpgrade python3-testUpgrade python3.14-freethreadingUpgrade python3.14-debuginfoUpgrade platform-pythonUpgrade python3.11-testUpgrade python3.11-libsUpgrade python3.12-libsUpgrade python3-debuginfoUpgrade python3.12-develUpgrade python3.12-debugUpgrade python3.11-debuginfoUpgrade python3.11Upgrade python3-debugsourceUpgrade python3.14-freethreading-debugUpgrade python3.14-freethreading-develUpgrade python3-libsUpgrade python3Upgrade platform-python-debugUpgrade python3.14-freethreading-libsUpgrade python3.11-tkinterUpgrade python3.14-idleUpgrade python3.14-develUpgrade python3.12-debugsourceUpgrade platform-python-develUpgrade python3.14-debugUpgrade python3.14Upgrade python3.12-testUpgrade python3.9-debugsourceUpgrade python3.12-idleUpgrade python3.9-debuginfoUpgrade python3-idle | Apr 29, 2026 | Apr 28, 2026 |
| Suse | — | Upgrade python310-develUpgrade python312-dbmUpgrade python310-baseUpgrade python3-baseUpgrade python39-baseUpgrade python3-develUpgrade python39Upgrade python313-toolsUpgrade python313Upgrade python312-cursesUpgrade python39-cursesUpgrade libpython3_12-1_0Upgrade python310-dbmUpgrade python313-develUpgrade libpython3_4m1_0Upgrade libpython3_6m1_0Upgrade python313-tkUpgrade python312-toolsUpgrade python310Upgrade python312-develUpgrade python3-dbmUpgrade libpython3_4m1_0-32bitUpgrade python3-tkUpgrade libpython3_13-1_0Upgrade python3-idleUpgrade python3-toolsUpgrade python3Upgrade libpython3_6m1_0-32bitUpgrade libpython3_10-1_0Upgrade python39-dbmUpgrade python313-cursesUpgrade python312Upgrade python310-tkUpgrade python313-baseUpgrade python310-idleUpgrade python3-testsuiteUpgrade python310-cursesUpgrade python312-tkUpgrade python312-baseUpgrade python313-idleUpgrade python310-toolsUpgrade python313-dbmUpgrade python3-docUpgrade libpython3_9-1_0Upgrade python3-cursesUpgrade python312-idleUpgrade python3-doc-devhelp | May 26, 2026 | Apr 28, 2026 |
| Ubuntu | — | Upgrade libpython3.12t64Upgrade python3.14Upgrade libpython3.14Upgrade python3.12Upgrade libpython3.10Upgrade python3.10 | Jul 6, 2026 | Apr 13, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub