CVE-2026-3446 — Vulnetix

CVE-2026-3446 PUBLISHED CVSS 6 MEDIUM

Base64 decoding stops at first padded quad by default

EPSS 0.03% · 8.7th percentile

Risk Scores

CVSS 4.0

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS Score

0.03%

8.7th percentile

Affected Products

Vendor	Product	Versions
Bitnami	python-min	0, 3.14.0, 0
Bitnami	python	0, 3.14.0
Bitnami	libpython	0, 3.14.0, 0

Exploit Intelligence

https://github.com/python/cpython/pull/145267 (circl)
https://github.com/python/cpython/issues/145264 (circl)
https://mail.python.org/archives/list/security-announce@python.org/thread/F5ZT5ICGJ6CKXVUJ34YBVY7WOZ5SHG53/ (circl)
https://github.com/python/cpython/commit/1f9958f909c1b41a4ffc0b613ef8ec8fa5e7c474 (circl)
https://github.com/python/cpython/commit/4561f6418a691b3e89aef0901f53fe0dfb7f7c0e (circl)
https://github.com/python/cpython/commit/e31c55121620189a0d1a07b689762d8ca9c1b7fa (circl)
rf-python3.11-dev_advisory.json (github-poc)
rf-python3.11-dev_advisory.json (github-poc)
rf-python3.11-dev_advisory.json (github-poc)
rf-python3.11-dev_advisory.json (github-poc)

…and 3 more exploits

Timeline

Apr 10, 2026 CVE Published
Apr 10, 2026 CVE Updated
Apr 11, 2026 Security Advisory
May 18, 2026 EPSS Score
May 19, 2026 EPSS Score
May 20, 2026 EPSS Score
May 21, 2026 EPSS Score
May 22, 2026 EPSS Score
May 23, 2026 EPSS Score
May 24, 2026 EPSS Score
May 25, 2026 EPSS Score
May 26, 2026 EPSS Score

References

Open in Interactive Console →