vulnerability
Huawei EulerOS: CVE-2020-26137: python-urllib3 security update
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:N/AC:L/Au:N/C:P/I:P/A:N) | Sep 30, 2020 | Sep 24, 2021 | Apr 1, 2026 |
Severity
6
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:N)
Published
Sep 30, 2020
Added
Sep 24, 2021
Modified
Apr 1, 2026
Description
urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116.
Solutions
huawei-euleros-2_0_sp8-upgrade-python2-urllib3huawei-euleros-2_0_sp8-upgrade-python3-urllib3
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.