Skip to main content
CVE-2026-49853VulnerabilityPublished Updated

Red Hat Security Advisory: python-tornado security update

Affects Red Hat python-tornadoSource GCVE Database

0
Compare

Mentioned vulnerabilities

Not known to be exploited.

Data as of 29 Oct 2026, 07:15 UTC

Severity
High

Rated by Threat Radar · CVSS not yet scored by NVD

EPSS
0.4% chance of exploitation in 30 days – higher than 38% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 12 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 29 Oct 2026.

What to do

AI-suggested

Red Hat has released updated python-tornado packages (version 6.5.8-0.el10_0.1) that fix the identified vulnerabilities. Users should apply these official updates as described in the Red Hat advisory (https://access.redhat.com/articles/11258) to remediate the issues. No additional mitigation steps are indicated beyond applying the provided patches.

Description

Multiple security vulnerabilities have been identified in the python-tornado package used in Red Hat Enterprise Linux 10.0 Extended Update Support. These include an information disclosure flaw due to improper handling of credentials during HTTP redirects, and two denial of service vulnerabilities caused by uncontrolled gzip decompression memory consumption and memory amplification in multipart parsing. Red Hat has issued an important security advisory and released updated python-tornado packages to address these issues.

References

Community reviews

Loading reviews…