9.4
CVSS 4.0
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и след действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.
Засегнати продукти
- Python Software Foundation CPython: преди 3.11.18; 3.12.0 преди 3.12.16; 3.13.0 преди 3.13.18; 3.14.0 преди 3.14.10; 3.15.0 преди 3.15.2; 3.16.0a1 преди 3.16.0
Вид слабост
История
- 24 октомври 2026 Публикувано
Други уязвимости в Python Software Foundation CPython
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-115557
- https://nvd.nist.gov/vuln/detail/CVE-2026-115557
- http://www.openwall.com/lists/oss-security/2026/10/20/29
- https://github.com/python/cpython/pull/160042
- https://github.com/python/cpython/issues/160040
- https://emudhra.we-have-a-problem.com/
- https://mail.python.org/archives/list/[email protected]/thread/FNAJMZV6XQYLVPABNINDMF3VF66AYLW4/
- https://github.com/python/cpython/commit/21a50891ab4be2e9955239e625ae2b40c6b1854d
- https://github.com/python/cpython/commit/36cd295f32fc9ba19399e01abee91231440a41dd
- https://github.com/python/cpython/commit/48d9b2712cd52206c7a5882d0fdca4863ed65e93
- https://github.com/python/cpython/commit/7dd8b4736a1419750b94a388e6d158be15836fe6
- https://github.com/python/cpython/commit/98f0e4ed349f370dc8a00366da1a9797e11c9ed5
- https://github.com/python/cpython/commit/a17d9ef549008133eadf20689b1f4787902efe5b
- https://github.com/python/cpython/commit/af52b41afa4330fb38583db553631baa2f122f90
- https://github.com/python/cpython/commit/c7fd7edf7e0d122a3973cf676fae21b6aaa650a8
- https://github.com/python/cpython/commit/e2a9dd97ef9571c710ac0afaa834c8879aebce78
- https://github.com/python/cpython/commit/e4500d8a437ee5b988a5410cb9b59d177aa01370
- https://github.com/python/cpython/commit/e4f63e65a93cf44c14274aa987e644b8c003625e
- https://github.com/python/cpython/commit/e9bf2cf84eebf838a1edaa1c648c2b36345b99d3
- http://www.openwall.com/lists/oss-security/2026/10/24/5