CVE-2026-23490

CVE-2026-23490 is a Denial-of-Service (DoS) vulnerability in the pyasn1 library for Python, affecting versions prior to 0.6.2. This flaw allows an attacker to trigger memory exhaustion by providing a malformed RELATIVE-OID with excessive continuation octets. Rated with a CVSS score of 7.5 (HIGH), it presents a network-based attack with low complexity, requiring no privileges or user interaction, and leading to high availability impact. While there is no evidence of active exploitation, public exploit code, or inclusion in the KEV catalog, the vulnerability has garnered some community discussion, indicating awareness within the security community.