A vulnerability labeled as critical has been found in pyca pyOpenSSL up to 0.14.0/26.0.0. Affected by this issue is the function
set_tlsext_servername_callback. The manipulation results in improper access controls.
This vulnerability is identified as CVE-2026-27448. The attack can be executed remotely. There is not any exploit available.
The affected component should be upgraded.
