Ghostwire

CVE-2026-115557: Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without...

CRITICAL CVSS 0.0 Exploit Available

Published: October 24, 2026 | Last Modified: October 24, 2026

Description

Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.

Ghostwire Analysis — What This Means Practically

Exploit code is reported to be available, increasing the likelihood of active exploitation.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (1 articles)

References

www.tenable.com/cve/CVE-2026-115557
www.cnnvd.org.cn/home/globalSearch?keyword=CVE-2026-115557
www.openwall.com/lists/oss-security/2026/10/20/29
emudhra.we-have-a-problem.com/
github.com/python/cpython/commit/21a50891ab4be2e9955239e625ae2b40c6b1854d
github.com/python/cpython/commit/36cd295f32fc9ba19399e01abee91231440a41dd
github.com/python/cpython/commit/48d9b2712cd52206c7a5882d0fdca4863ed65e93
github.com/python/cpython/commit/7dd8b4736a1419750b94a388e6d158be15836fe6
github.com/python/cpython/commit/98f0e4ed349f370dc8a00366da1a9797e11c9ed5
github.com/python/cpython/commit/a17d9ef549008133eadf20689b1f4787902efe5b
github.com/python/cpython/commit/af52b41afa4330fb38583db553631baa2f122f90
github.com/python/cpython/commit/c7fd7edf7e0d122a3973cf676fae21b6aaa650a8
github.com/python/cpython/commit/e2a9dd97ef9571c710ac0afaa834c8879aebce78
github.com/python/cpython/commit/e4500d8a437ee5b988a5410cb9b59d177aa01370
github.com/python/cpython/commit/e4f63e65a93cf44c14274aa987e644b8c003625e