pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a very large exponent, causing float conversion through prettyPrint(), str(), comparison, arithmetic, int(), or an explicit float() call to consume excessive CPU and memory and hang applications that decode untrusted ASN.1 data and then print, log, or compare decoded objects. This issue is fixed in version 0.6.4.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3836 advisory.

    pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER     codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID     size, allowing a crafted input to force construction of an arbitrarily large integer with CPU cost growing     quadratically and to trigger unhandled ValueError exceptions in Python 3.11+ error formatting paths. Any     application decoding untrusted BER, CER, or DER input is affected. This issue is fixed in version 0.6.4.
    (CVE-2026-59884)

    pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER, CER, and DER decoders process     OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs, so a small     crafted payload containing an OID with many arcs consumes excessive CPU per decode() call and can deny     service to applications that decode untrusted ASN.1 data. The corresponding encoders have the same     quadratic behavior when an application re-encodes previously decoded attacker-supplied values. This issue     is fixed in version 0.6.4. (CVE-2026-59885)

    pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa,     base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER     encoded REAL value only a few bytes long can carry a very large exponent, causing float conversion through     prettyPrint(), str(), comparison, arithmetic, int(), or an explicit float() call to consume excessive CPU     and memory and hang applications that decode untrusted ASN.1 data and then print, log, or compare decoded     objects. This issue is fixed in version 0.6.4. (CVE-2026-59886)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2000 advisory.

    pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER     codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID     size, allowing a crafted input to force construction of an arbitrarily large integer with CPU cost growing     quadratically and to trigger unhandled ValueError exceptions in Python 3.11+ error formatting paths. Any     application decoding untrusted BER, CER, or DER input is affected. This issue is fixed in version 0.6.4.
    (CVE-2026-59884)

    pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER, CER, and DER decoders process     OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs, so a small     crafted payload containing an OID with many arcs consumes excessive CPU per decode() call and can deny     service to applications that decode untrusted ASN.1 data. The corresponding encoders have the same     quadratic behavior when an application re-encodes previously decoded attacker-supplied values. This issue     is fixed in version 0.6.4. (CVE-2026-59885)

    pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa,     base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER     encoded REAL value only a few bytes long can carry a very large exponent, causing float conversion through     prettyPrint(), str(), comparison, arithmetic, int(), or an explicit float() call to consume excessive CPU     and memory and hang applications that decode untrusted ASN.1 data and then print, log, or compare decoded     objects. This issue is fixed in version 0.6.4. (CVE-2026-59886)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:50336 advisory.

    Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing     IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to     individual teams, while automation developers retain the freedom to write tasks that leverage existing     knowledge without the overhead. Ansible Automation Platform makes it possible for users across an     organization to share, vet, and manage automation content by means of a simple, powerful, and agentless     language.

    Security Fix(es):

    * automation-controller: PyJWT: Authentication bypass due to forged JSON Web Tokens (CVE-2026-48526)
    * automation-eda-controller: ExternalEventStreamViewSet trusts Subject header without validation and leaks     expected DN (CVE-2026-12383)
    * automation-eda-controller: Authentication bypass in Event-Driven Ansible via forged HTTP header     (CVE-2026-18141)
    * automation-gateway-proxy: Go net package: Denial of Service via long CNAME response in LookupCNAME     (CVE-2026-33811)
    * python3.12-aiohttp: Arbitrary code execution via untrusted input to CookieJar.load() (CVE-2026-34993)
    * python3.12-daphne: daphne: Denial of Service via excessive WebSocket message size (CVE-2026-44545)
    * python3.12-pillow: Denial of Service via crafted GD 2.x image file (CVE-2026-55380)
    * python3.12-pillow: Denial of Service via crafted BDF font file (CVE-2026-55379)
    * python3.12-pillow: Denial of Service via excessive memory allocation when processing font files     (CVE-2026-54060)
    * python3.12-pillow: Denial of Service via crafted PCF font data (CVE-2026-54059)
    * python3.12-pillow: Native heap out-of-bounds write (CVE-2026-59197)
    * python3.12-pyasn1: Denial of Service via crafted ASN.1 REAL values (CVE-2026-59886)
    * python3.12-pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER (CVE-2026-59885)
    * receptor: quic-go: Denial of Service via excessive memory allocation in HTTP/3 trailers (CVE-2026-40898)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    For details about this release, refer to the release notes listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:50319 advisory.

    Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing     IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to     individual teams, while automation developers retain the freedom to write tasks that leverage existing     knowledge without the overhead. Ansible Automation Platform makes it possible for users across an     organization to share, vet, and manage automation content by means of a simple, powerful, and agentless     language.

    Security Fix(es):

    * automation-controller: PyJWT: Authentication bypass due to forged JSON Web Tokens (CVE-2026-48526)
    * automation-eda-controller: ExternalEventStreamViewSet trusts Subject header without validation and leaks     expected DN (CVE-2026-12383)
    * automation-gateway-proxy: Go net package: Denial of Service via long CNAME response in LookupCNAME     (CVE-2026-33811)
    * python3.12-aiohttp: Arbitrary code execution via untrusted input to CookieJar.load() (CVE-2026-34993)
    * python3.12-daphne: daphne: Denial of Service via excessive WebSocket message size (CVE-2026-44545)
    * python3.12-pillow: Denial of Service via crafted PCF font data (CVE-2026-54059)
    * python3.12-pillow: Denial of Service via excessive memory allocation when processing font files     (CVE-2026-54060)
    * python3.12-pillow: Denial of Service via crafted BDF font file (CVE-2026-55379)
    * python3.12-pillow: Denial of Service via crafted GD 2.x image file (CVE-2026-55380)
    * python3.12-pillow: Native heap out-of-bounds write (CVE-2026-59197)
    * python3.12-pyasn1: Denial of Service via crafted ASN.1 REAL values (CVE-2026-59885)
    * python3.12-pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER (CVE-2026-59886)
    * receptor: quic-go: Denial of Service via excessive memory allocation in HTTP/3 trailers (CVE-2026-40898)
    * receptor: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries     (CVE-2026-27145)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    For details about this release, refer to the release notes listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3238-1 advisory.

    - CVE-2026-59884: BER/CER/DER decoder denial of service via unbounded long-form tag IDs (bsc#1271464).
    - CVE-2026-59885: quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of     service       (bsc#1271465).
    - CVE-2026-59886: uncontrolled resource consumption when converting decoded REAL values (bsc#1271466).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21392-1 advisory.

    - CVE-2026-59884: BER/CER/DER decoder denial of service via unbounded long-form tag IDs (bsc#1271464).
    - CVE-2026-59885: quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of     service       (bsc#1271465).
    - CVE-2026-59886: uncontrolled resource consumption when converting decoded REAL values (bsc#1271466).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa,
    base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER
    encoded REAL value only a few bytes long can carry a very large exponent, causing float conversion through
    prettyPrint(), str(), comparison, arithmetic, int(), or an explicit float() call to consume excessive CPU
    and memory and hang applications that decode untrusted ASN.1 data and then print, log, or compare decoded
    objects. This issue is fixed in version 0.6.4. (CVE-2026-59886)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa,     base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER     encoded REAL value only a few bytes long can carry a very large exponent, causing float conversion through     prettyPrint(), str(), comparison, arithmetic, int(), or an explicit float() call to consume excessive CPU     and memory and hang applications that decode untrusted ASN.1 data and then print, log, or compare decoded     objects. This issue is fixed in version 0.6.4. (CVE-2026-59886)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
332047	Amazon Linux 2 : python-pyasn1, --advisory ALAS2-2026-3836 (ALAS-2026-3836)	Nessus	Amazon Linux Local Security Checks	high
332035	Amazon Linux 2023 : python3-pyasn1, python3-pyasn1-modules (ALAS2023-2026-2000)	Nessus	Amazon Linux Local Security Checks	high
331965	RHEL 10 / 9 : Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update (Important) (RHSA-2026:50336)	Nessus	Red Hat Local Security Checks	high
331963	RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update (Important) (RHSA-2026:50319)	Nessus	Red Hat Local Security Checks	high
330310	SUSE SLED15 / SLES15 Security Update : python-pyasn1 (SUSE-SU-2026:3238-1)	Nessus	SuSE Local Security Checks	high
329306	openSUSE 16 Security Update : python-pyasn1 (openSUSE-SU-2026:21392-1)	Nessus	SuSE Local Security Checks	high
445074	SCA: security update for pyasn1 (GHSA-hm4w-wwcw-mr6r)	Tenable Cloud Security	SCA Checks	high
445074	SCA: security update for pyasn1 (GHSA-hm4w-wwcw-mr6r)	Tenable Self-Hosted Container Security	SCA Checks	high
327027	Linux Distros Unpatched Vulnerability : CVE-2026-59886	Nessus	Misc.	high

Detections

Analytics

CVE-2026-59886

high

Tenable Plugins

high

high

high

high

high

high

high

high

high