CVE-2026-115557EUVD-2026-109299
Distrust compromised intermediate certificates in ssl module
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Fix
- Fix or patch referenced
- Public exploit
- None on Exploit-DB
Summary
This vulnerability affects Python's built-in "ssl" module, which handles secure (TLS/SSL) connections. Without this fix, the module could accept certificates known to be compromised, though it now automatically rejects them even when certificate revocation checking is not configured.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.
Affected versions
- Python Software Foundation CPython
through 3.16.0