urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.

The remote RockyLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:28158 advisory.

    * urllib3: urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432)

    * urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers     (CVE-2026-44431)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:28000 advisory.

    * urllib3: urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432)

    * urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers     (CVE-2026-44431)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:27929 advisory.

    * urllib3: urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432)

    * urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers     (CVE-2026-44431)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:28159 advisory.

    * urllib3: urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432)

    * urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers     (CVE-2026-44431)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:28157 advisory.

    * urllib3: urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432)

    * urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers     (CVE-2026-44431)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has a package installed that is affected by a vulnerability as referenced in the dsa-6363 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6363-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     June 23, 2026                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : python-urllib3     CVE ID         : CVE-2026-44431

    It was discovered that the urllib3 Python HTTP library didn't sanitise     some cross-origin redirects, which could result in information     disclosure.

    For the stable distribution (trixie), this problem has been fixed in     version 2.3.0-3+deb13u2.

    We recommend that you upgrade your python-urllib3 packages.

    For the detailed security status of python-urllib3 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/python-urllib3

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:28000 advisory.

    * urllib3: urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432)
      * urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers     (CVE-2026-44431)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:27929 advisory.

    * urllib3: urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432)
      * urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers     (CVE-2026-44431)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:28157 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * urllib3: urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432)

    * urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers     (CVE-2026-44431)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:28159 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * urllib3: urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432)

    * urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers     (CVE-2026-44431)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:28158 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * urllib3: urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432)

    * urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers     (CVE-2026-44431)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1843 advisory.

    urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed     from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still     forward these sensitive headers. This vulnerability is fixed in 2.7.0. (CVE-2026-44431)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of python-urllib3 installed on the remote host is prior to 1.25.9-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3377 advisory.

    urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed     from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still     forward these sensitive headers. This vulnerability is fixed in 2.7.0. (CVE-2026-44431)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of python3-urllib3 installed on the remote host is prior to 1.25.6-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3376 advisory.

    urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed     from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still     forward these sensitive headers. This vulnerability is fixed in 2.7.0. (CVE-2026-44431)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:28000 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * urllib3: urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432)

    * urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers     (CVE-2026-44431)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:27929 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * urllib3: urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432)

    * urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers     (CVE-2026-44431)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the python-urllib3-1.26.5-8.el9 build changelog.

  - urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed     from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still     forward these sensitive headers. This vulnerability is fixed in 2.7.0. (CVE-2026-44431)

  - urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the     whole response instead of the requested portion (1) during the second HTTPResponse.read(amt=N) call when     the response was decompressed using the official Brotli library or (2) when HTTPResponse.drain_conn() was     called after the response had been read and decompressed partially (compression algorithm did not matter     here). These issues could cause urllib3 to fully decode a small amount of highly compressed data in a     single operation. This could result in excessive resource consumption (high CPU usage and massive memory     allocation for the decompressed data) on the client side. This vulnerability is fixed in 2.7.0.
    (CVE-2026-44432)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8379-1 advisory.

    It was discovered that urllib3 incorrectly handled cross-origin redirects in ProxyManager. A remote     attacker could possibly use this issue to obtain sensitive information. (CVE-2026-44431)

    It was discovered that urllib3 incorrectly handled decompression of specially crafted responses. A remote     attacker could possibly use this issue to cause urllib3 to consume resources, leading to a denial of     service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-44432)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:2119-1 advisory.

    This update for python-urllib3 fixes the following issue

    - CVE-2026-44431: sensitive information disclosure due to sensitive headers being forwarded across origins     in proxied       low-level redirects (bsc#1265267).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2065-1 advisory.

    This update for python-urllib3 fixes the following issue

    - CVE-2026-44431: sensitive information disclosure due to sensitive headers being forwarded across origins     in proxied       low-level redirects (bsc#1265267).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:2067-1 advisory.

    This update for python-urllib3_1 fixes the following issue

    - CVE-2026-44431: sensitive information disclosure due to sensitive headers being forwarded across origins     in proxied       low-level redirects (bsc#1265267).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed     from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still     forward these sensitive headers. This vulnerability is fixed in 2.7.0. (CVE-2026-44431)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
322393	RockyLinux 9 : python-urllib3 (RLSA-2026:28158)	Nessus	Rocky Linux Local Security Checks	high
322392	RockyLinux 10 : python-urllib3 (RLSA-2026:28000)	Nessus	Rocky Linux Local Security Checks	high
322386	RockyLinux 10 : python3.14-urllib3 (RLSA-2026:27929)	Nessus	Rocky Linux Local Security Checks	high
322384	RockyLinux 9 : python3.12-urllib3 (RLSA-2026:28159)	Nessus	Rocky Linux Local Security Checks	high
322371	RockyLinux 9 : python3.14-urllib3 (RLSA-2026:28157)	Nessus	Rocky Linux Local Security Checks	high
322325	Debian dsa-6363 : python3-urllib3 - security update	Nessus	Debian Local Security Checks	high
322288	AlmaLinux 10 : python-urllib3 (ALSA-2026:28000)	Nessus	Alma Linux Local Security Checks	high
322279	AlmaLinux 10 : python3.14-urllib3 (ALSA-2026:27929)	Nessus	Alma Linux Local Security Checks	high
322269	RHEL 9 : python3.14-urllib3 (RHSA-2026:28157)	Nessus	Red Hat Local Security Checks	high
322268	RHEL 9 : python3.12-urllib3 (RHSA-2026:28159)	Nessus	Red Hat Local Security Checks	high
322214	RHEL 9 : python-urllib3 (RHSA-2026:28158)	Nessus	Red Hat Local Security Checks	high
322067	Amazon Linux 2023 : python3-urllib3 (ALAS2023-2026-1843)	Nessus	Amazon Linux Local Security Checks	high
322024	Amazon Linux 2 : python-urllib3, --advisory ALAS2-2026-3377 (ALAS-2026-3377)	Nessus	Amazon Linux Local Security Checks	high
322009	Amazon Linux 2 : python3-urllib3, --advisory ALAS2-2026-3376 (ALAS-2026-3376)	Nessus	Amazon Linux Local Security Checks	high
321983	RHEL 10 : python-urllib3 (RHSA-2026:28000)	Nessus	Red Hat Local Security Checks	high
321979	RHEL 10 : python3.14-urllib3 (RHSA-2026:27929)	Nessus	Red Hat Local Security Checks	high
321968	CentOS 9 : python-urllib3-1.26.5-8.el9	Nessus	CentOS Local Security Checks	high
318624	Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : urllib3 vulnerabilities (USN-8379-1)	Nessus	Ubuntu Local Security Checks	high
318097	SUSE SLED15 / SLES15 Security Update : python-urllib3 (SUSE-SU-2026:2119-1)	Nessus	SuSE Local Security Checks	high
317725	SUSE SLES12 Security Update : python-urllib3 (SUSE-SU-2026:2065-1)	Nessus	SuSE Local Security Checks	high
317657	SUSE SLED15 / SLES15 Security Update : python-urllib3_1 (SUSE-SU-2026:2067-1)	Nessus	SuSE Local Security Checks	high
314735	Linux Distros Unpatched Vulnerability : CVE-2026-44431	Nessus	Misc.	high

Detections

Analytics

CVE-2026-44431

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high