Critical severityNVD Advisory· Published Oct 24, 2026· Updated Oct 24, 2026
CVE-2026-115557
CVE-2026-115557
Description
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
6- www.openwall.com/lists/oss-security/2026/10/20/29nvd
- www.openwall.com/lists/oss-security/2026/10/24/5nvd
- emudhra.we-have-a-problem.comnvd
- github.com/python/cpython/issues/160040nvd
- github.com/python/cpython/pull/160042nvd
- mail.python.org/archives/list/[email protected]/thread/FNAJMZV6XQYLVPABNINDMF3VF66AYLW4/nvd
News mentions
0No linked articles in our index yet.