CVE-2026-115557 — Vulnerability intelligence

Python Software Foundation — CPython

Published: 2026-10-24T14:15:14.283Z

CVSS

9.4

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.

Sources

• CVE-2026-115557
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• CVE-2026-115557