PT-2026-122608

CVE-2026-115557

Published

2026-10-24

Updated

2026-11-09

Description by

CVSS 4.0

9.4

Critical

MetricsAV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Python versions prior to 3.11.18 Python versions prior to 3.12.16 Python versions prior to 3.13.18

Description The ssl module fails to distrust known compromised intermediate certificates. To address this, a denylist of compromised certificates has been implemented to ensure that these certificates are automatically rejected, regardless of the SSLContext policy configuration, even when certificate revocation is not configured.

Recommendations Update to version 3.11.18 Update to version 3.12.16 Update to version 3.13.18

Exploitability

Exploit

Fix

Researchers

Vendors

Affected products

Weakness enumeration