CVE-2026-115557
Distrust compromised intermediate certificates in ssl module
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.
| CWE | CWE-299 |
| Vendor | python software foundation |
| Product | cpython |
| Published | Oct 24, 2026 |
| Last Updated | Oct 24, 2026 |
Stay Ahead of the Next One
Get instant alerts for python software foundation cpython
Be the first to know when new unknown vulnerabilities affecting python software foundation cpython are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Python Software Foundation / CPython
0 ≤ 3.16.0
References
openwall.com: http://www.openwall.com/lists/oss-security/2026/10/20/29 github.com: https://github.com/python/cpython/pull/160042 github.com: https://github.com/python/cpython/issues/160040 emudhra.we-have-a-problem.com: https://emudhra.we-have-a-problem.com/ mail.python.org: https://mail.python.org/archives/list/[email protected]/thread/FNAJMZV6XQYLVPABNINDMF3VF66AYLW4/