CVE-2026-115557
Distrust compromised intermediate certificates in ssl module
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Passive
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Distrust compromised intermediate certificates in ssl module
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.
- Record
CVE-2026-115557- CVSS 4.0
- 9.4 Critical
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H - Weakness
- CWE-299
- Updated
- 2026-11-02
EUVDEUVD-2026-109299
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.
- Record
EUVD-2026-109299- CVSS 4.0
- 9.4 Critical
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-x547-2835-q547
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user...
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.
- Record
GHSA-x547-2835-q547- CVSS 4.0
- 9.4 Critical
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Weakness
- CWE-299
- Updated
- 2026-11-02
NVD
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.
- Record
CVE-2026-115557- CVSS 4.0
- 9.4 Critical
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Weakness
- CWE-299
- Updated
- 2026-11-02
OSVALPINE-CVE-2026-115557
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.
- Record
ALPINE-CVE-2026-115557- CVSS 4.0
- 9.4 Critical
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Updated
- 2026-11-02
OSV
Distrust compromised intermediate certificates in ssl module
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.
- Record
CVE-2026-115557- CVSS 4.0
- 9.4 Critical
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H - Weakness
- CWE-299
- Updated
- 2026-11-04
Show 9 moreShow less
OSVDEBIAN-CVE-2026-115557
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.
- Record
DEBIAN-CVE-2026-115557- CVSS 4.0
- 9.4 Critical
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Updated
- 2026-11-03
OSVUBUNTU-CVE-2026-115557
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.
- Record
UBUNTU-CVE-2026-115557- CVSS 4.0
- 9.4 Critical
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H - Updated
- 2026-11-02
OSVAZL-111098 No score
CVE-2026-115557 affecting package python-py 1.11.0-1
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.
- Record
AZL-111098- Updated
- 2026-11-02
OSVAZL-111101 No score
CVE-2026-115557 affecting package python3 for versions less than 3.12.15-3
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.
- Record
AZL-111101- Updated
- 2026-11-02
OSVBIT-libpython-2026-115557 No score
Distrust compromised intermediate certificates in ssl module
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.
- Record
BIT-libpython-2026-115557- Updated
- 2026-11-02
OSVBIT-python-2026-115557 No score
Distrust compromised intermediate certificates in ssl module
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.
- Record
BIT-python-2026-115557- Updated
- 2026-11-02
OSVBIT-python-min-2026-115557 No score
Distrust compromised intermediate certificates in ssl module
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.
- Record
BIT-python-min-2026-115557- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:12348-1 No score
python315-3.15.2-1.1 on GA media
These are all security issues fixed in the python315-3.15.2-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:12348-1- Updated
- 2026-11-02
OSVPSF-2026-46 No score
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.
- Record
PSF-2026-46- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
python3Alpine:v3.21 |
before 3.12.16-r0 | 3.12.16-r0 |
python3Alpine:v3.22 |
before 3.12.16-r0 | 3.12.16-r0 |
python3Alpine:v3.23 |
before 3.12.16-r0 | 3.12.16-r0 |
python3Alpine:v3.24 |
before 3.14.10-r0 | 3.14.10-r0 |
python-pyAzure Linux:3 |
through 1.11.0-1 | None known |
python3Azure Linux:3 |
before 3.12.15-3 | 3.12.15-3 |
python3Alpaquita:23 |
3.11.3-r0 up to 3.11.18-r0 | 3.11.18-r0 |
python3Alpaquita:25 |
3.12.10-r1 up to 3.12.16-r0 | 3.12.16-r0 |
python3Alpaquita:stream |
3.11.4-r0 up to 3.14.10-r1 | 3.14.10-r1 |
python3BellSoft Hardened Containers:23 |
3.11.3-r0 up to 3.11.18-r0 | 3.11.18-r0 |
Show 28 moreShow less
| Package | Affected | Fixed |
|---|---|---|
python3BellSoft Hardened Containers:25 |
3.12.10-r1 up to 3.12.16-r0 | 3.12.16-r0 |
python3BellSoft Hardened Containers:stream |
3.11.4-r0 up to 3.14.10-r1 | 3.14.10-r1 |
libpythonBitnami |
before 3.11.18, 3.12.0 up to 3.12.16, 3.13.0 up to 3.13.18, 3.14.0 up to 3.14.10, 3.15.0 up to 3.15.2 | 3.11.183.12.163.13.183.14.103.15.2 |
pythonBitnami |
before 3.11.18, 3.12.0 up to 3.12.16, 3.13.0 up to 3.13.18, 3.14.0 up to 3.14.10, 3.15.0 up to 3.15.2 | 3.11.183.12.163.13.183.14.103.15.2 |
python-minBitnami |
before 3.11.18, 3.12.0 up to 3.12.16, 3.13.0 up to 3.13.18, 3.14.0 up to 3.14.10, 3.15.0 up to 3.15.2 | 3.11.183.12.163.13.183.14.103.15.2 |
python3.11Debian:12 |
All versions, plus listed versions 3.11.2-63.11.2-6+deb12u13.11.2-6+deb12u23.11.2-6+deb12u33.11.2-6+deb12u4 Show 24 moreShow less3.11.2-6+deb12u53.11.2-6+deb12u63.11.2-6+deb12u73.11.2-6+deb12u83.11.2-6+deb12u93.11.3-13.11.3-23.11.4-13.11.5-13.11.5-23.11.5-33.11.6-13.11.6-23.11.6-33.11.6-3~hurd.23.11.7-13.11.7-23.11.8-13.11.8-1.1~exp13.11.8-1.1~exp23.11.8-23.11.8-33.11.8-3+hurd.13.11.9-1 |
None known |
python3.13Debian:13 |
All versions, plus listed versions 3.13.11-13.13.12-13.13.14-13.13.15-13.13.18-1 Show 10 moreShow less3.13.5-23.13.5-2+deb13u13.13.5-2+deb13u23.13.5-2+deb13u33.13.5-2+deb13u43.13.5-2+deb13u53.13.6-13.13.7-13.13.8-13.13.9-1 |
None known |
python3.14Debian:14 |
before 3.14.10-1, plus listed versions 3.14.0-13.14.0-23.14.0-33.14.0-43.14.0-5 Show 26 moreShow less3.14.0~a7-13.14.0~b1-13.14.0~b2-13.14.0~b3-13.14.0~b4-13.14.0~rc1-13.14.0~rc2-13.14.0~rc3-13.14.2-13.14.3-13.14.3-23.14.3-33.14.3-43.14.3-53.14.4-13.14.4-23.14.5-13.14.5~rc1-13.14.6-13.14.7-13.14.7-23.14.7-33.14.7-43.14.7-53.14.8-13.14.9-1 |
3.14.10-1 |
python3.15Debian:14 |
before 3.15.2-1, plus listed versions 3.15.0-13.15.0~a8-13.15.0~a8-23.15.0~b1-13.15.0~b1-2 Show 11 moreShow less3.15.0~b1-33.15.0~b2-13.15.0~b3-13.15.0~b4-13.15.0~rc1-13.15.0~rc2-13.15.0~rc2-23.15.0~rc2-33.15.0~rc3-13.15.0~rc3-23.15.1-1 |
3.15.2-1 |
python2.7Ubuntu:Pro:14.04:LTS |
All versions, plus listed versions 2.7.5-8ubuntu32.7.5-8ubuntu42.7.6-22.7.6-2ubuntu12.7.6-3 Show 35 moreShow less2.7.6-3ubuntu12.7.6-42.7.6-4ubuntu12.7.6-52.7.6-72.7.6-82.7.6-8ubuntu0.22.7.6-8ubuntu0.32.7.6-8ubuntu0.42.7.6-8ubuntu0.52.7.6-8ubuntu0.6+esm22.7.6-8ubuntu0.6+esm32.7.6-8ubuntu0.6+esm52.7.6-8ubuntu0.6+esm62.7.6-8ubuntu0.6+esm72.7.6-8ubuntu0.6+esm82.7.6-8ubuntu0.6+esm92.7.6-8ubuntu0.6+esm102.7.6-8ubuntu0.6+esm112.7.6-8ubuntu0.6+esm122.7.6-8ubuntu0.6+esm132.7.6-8ubuntu0.6+esm142.7.6-8ubuntu0.6+esm152.7.6-8ubuntu0.6+esm162.7.6-8ubuntu0.6+esm172.7.6-8ubuntu0.6+esm182.7.6-8ubuntu0.6+esm202.7.6-8ubuntu0.6+esm212.7.6-8ubuntu0.6+esm222.7.6-8ubuntu0.6+esm242.7.6-8ubuntu0.6+esm252.7.6-8ubuntu0.6+esm262.7.6-8ubuntu0.6+esm282.7.6-8ubuntu0.6+esm292.7.6-8ubuntu0.6+esm30 |
None known |
python3.4Ubuntu:Pro:14.04:LTS |
All versions, plus listed versions 3.4~b1-0ubuntu33.4~b1-4ubuntu43.4~b1-4ubuntu63.4~b1-5ubuntu23.4~b2-1 Show 29 moreShow less3.4~b3-1ubuntu13.4~rc1-1build13.4~rc2-13.4~rc3-0ubuntu13.4.0-13.4.0-2ubuntu13.4.0-2ubuntu1.13.4.3-1ubuntu1~14.04.13.4.3-1ubuntu1~14.04.33.4.3-1ubuntu1~14.04.43.4.3-1ubuntu1~14.04.53.4.3-1ubuntu1~14.04.63.4.3-1ubuntu1~14.04.73.4.3-1ubuntu1~14.04.7+esm23.4.3-1ubuntu1~14.04.7+esm43.4.3-1ubuntu1~14.04.7+esm63.4.3-1ubuntu1~14.04.7+esm73.4.3-1ubuntu1~14.04.7+esm83.4.3-1ubuntu1~14.04.7+esm103.4.3-1ubuntu1~14.04.7+esm113.4.3-1ubuntu1~14.04.7+esm123.4.3-1ubuntu1~14.04.7+esm133.4.3-1ubuntu1~14.04.7+esm143.4.3-1ubuntu1~14.04.7+esm153.4.3-1ubuntu1~14.04.7+esm163.4.3-1ubuntu1~14.04.7+esm173.4.3-1ubuntu1~14.04.7+esm193.4.3-1ubuntu1~14.04.7+esm203.4.3-1ubuntu1~14.04.7+esm21 |
None known |
python3.5Ubuntu:Pro:14.04:LTS |
All versions, plus listed versions 3.5.2-2ubuntu0~16.04.4~14.04.13.5.2-2ubuntu0~16.04.4~14.04.1+esm13.5.2-2ubuntu0~16.04.4~14.04.1+esm33.5.2-2ubuntu0~16.04.4~14.04.1+esm43.5.2-2ubuntu0~16.04.4~14.04.1+esm5 Show 6 moreShow less3.5.2-2ubuntu0~16.04.4~14.04.1+esm63.5.2-2ubuntu0~16.04.4~14.04.1+esm73.5.2-2ubuntu0~16.04.4~14.04.1+esm83.5.2-2ubuntu0~16.04.4~14.04.1+esm93.5.2-2ubuntu0~16.04.4~14.04.1+esm103.5.2-2ubuntu0~16.04.4~14.04.1+esm11 |
None known |
python2.7Ubuntu:Pro:16.04:LTS |
All versions, plus listed versions 2.7.10-4ubuntu12.7.10-4ubuntu22.7.11-22.7.11-32.7.11-4 Show 37 moreShow less2.7.11-62.7.11-72.7.11-7ubuntu12.7.12-1~16.042.7.12-1ubuntu0~16.04.12.7.12-1ubuntu0~16.04.22.7.12-1ubuntu0~16.04.32.7.12-1ubuntu0~16.04.42.7.12-1ubuntu0~16.04.82.7.12-1ubuntu0~16.04.92.7.12-1ubuntu0~16.04.112.7.12-1ubuntu0~16.04.122.7.12-1ubuntu0~16.04.132.7.12-1ubuntu0~16.04.142.7.12-1ubuntu0~16.04.162.7.12-1ubuntu0~16.04.182.7.12-1ubuntu0~16.04.18+esm12.7.12-1ubuntu0~16.04.18+esm22.7.12-1ubuntu0~16.04.18+esm32.7.12-1ubuntu0~16.04.18+esm42.7.12-1ubuntu0~16.04.18+esm52.7.12-1ubuntu0~16.04.18+esm62.7.12-1ubuntu0~16.04.18+esm72.7.12-1ubuntu0~16.04.18+esm82.7.12-1ubuntu0~16.04.18+esm92.7.12-1ubuntu0~16.04.18+esm102.7.12-1ubuntu0~16.04.18+esm112.7.12-1ubuntu0~16.04.18+esm122.7.12-1ubuntu0~16.04.18+esm132.7.12-1ubuntu0~16.04.18+esm152.7.12-1ubuntu0~16.04.18+esm162.7.12-1ubuntu0~16.04.18+esm172.7.12-1ubuntu0~16.04.18+esm182.7.12-1ubuntu0~16.04.18+esm192.7.12-1ubuntu0~16.04.18+esm202.7.12-1ubuntu0~16.04.18+esm212.7.12-1ubuntu0~16.04.18+esm22 |
None known |
python3.5Ubuntu:Pro:16.04:LTS |
All versions, plus listed versions 3.5.0-33.5.0-3ubuntu13.5.1~rc1-2ubuntu13.5.1-13.5.1-2 Show 43 moreShow less3.5.1-33.5.1-53.5.1-6ubuntu13.5.1-6ubuntu23.5.1-9ubuntu13.5.1-103.5.2-2~16.013.5.2-2~16.043.5.2-2ubuntu0~16.04.13.5.2-2ubuntu0~16.04.23.5.2-2ubuntu0~16.04.33.5.2-2ubuntu0~16.04.43.5.2-2ubuntu0~16.04.53.5.2-2ubuntu0~16.04.83.5.2-2ubuntu0~16.04.93.5.2-2ubuntu0~16.04.103.5.2-2ubuntu0~16.04.113.5.2-2ubuntu0~16.04.123.5.2-2ubuntu0~16.04.133.5.2-2ubuntu0~16.04.13+esm13.5.2-2ubuntu0~16.04.13+esm23.5.2-2ubuntu0~16.04.13+esm33.5.2-2ubuntu0~16.04.13+esm53.5.2-2ubuntu0~16.04.13+esm63.5.2-2ubuntu0~16.04.13+esm73.5.2-2ubuntu0~16.04.13+esm83.5.2-2ubuntu0~16.04.13+esm93.5.2-2ubuntu0~16.04.13+esm103.5.2-2ubuntu0~16.04.13+esm113.5.2-2ubuntu0~16.04.13+esm123.5.2-2ubuntu0~16.04.13+esm133.5.2-2ubuntu0~16.04.13+esm143.5.2-2ubuntu0~16.04.13+esm153.5.2-2ubuntu0~16.04.13+esm163.5.2-2ubuntu0~16.04.13+esm173.5.2-2ubuntu0~16.04.13+esm183.5.2-2ubuntu0~16.04.13+esm193.5.2-2ubuntu0~16.04.13+esm203.5.2-2ubuntu0~16.04.13+esm213.5.2-2ubuntu0~16.04.13+esm223.5.2-2ubuntu0~16.04.13+esm233.5.2-2ubuntu0~16.04.13+esm243.5.2-2ubuntu0~16.04.13+esm25 |
None known |
python2.7Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 2.7.14-2ubuntu22.7.14-42.7.14-62.7.14-72.7.14-8 Show 31 moreShow less2.7.15~rc1-12.7.15~rc1-1ubuntu0.12.7.15-4ubuntu4~18.042.7.15-4ubuntu4~18.04.12.7.15-4ubuntu4~18.04.22.7.17-1~18.042.7.17-1~18.04ubuntu12.7.17-1~18.04ubuntu1.12.7.17-1~18.04ubuntu1.22.7.17-1~18.04ubuntu1.32.7.17-1~18.04ubuntu1.52.7.17-1~18.04ubuntu1.62.7.17-1~18.04ubuntu1.72.7.17-1~18.04ubuntu1.82.7.17-1~18.04ubuntu1.102.7.17-1~18.04ubuntu1.112.7.17-1~18.04ubuntu1.132.7.17-1~18.04ubuntu1.13+esm12.7.17-1~18.04ubuntu1.13+esm22.7.17-1~18.04ubuntu1.13+esm32.7.17-1~18.04ubuntu1.13+esm42.7.17-1~18.04ubuntu1.13+esm52.7.17-1~18.04ubuntu1.13+esm62.7.17-1~18.04ubuntu1.13+esm72.7.17-1~18.04ubuntu1.13+esm82.7.17-1~18.04ubuntu1.13+esm102.7.17-1~18.04ubuntu1.13+esm112.7.17-1~18.04ubuntu1.13+esm122.7.17-1~18.04ubuntu1.13+esm132.7.17-1~18.04ubuntu1.13+esm142.7.17-1~18.04ubuntu1.13+esm15 |
None known |
python3.6Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 3.6.3-1ubuntu13.6.4~rc1-13.6.4~rc1-23.6.4-13.6.4-2 Show 31 moreShow less3.6.4-3build13.6.4-43.6.5~rc1-13.6.5-33.6.6-1~18.043.6.7-1~18.043.6.8-1~18.04.13.6.8-1~18.04.23.6.8-1~18.04.33.6.9-1~18.043.6.9-1~18.04ubuntu13.6.9-1~18.04ubuntu1.13.6.9-1~18.04ubuntu1.33.6.9-1~18.04ubuntu1.43.6.9-1~18.04ubuntu1.63.6.9-1~18.04ubuntu1.73.6.9-1~18.04ubuntu1.83.6.9-1~18.04ubuntu1.93.6.9-1~18.04ubuntu1.103.6.9-1~18.04ubuntu1.123.6.9-1~18.04ubuntu1.133.6.9-1~18.04ubuntu1.13+esm13.6.9-1~18.04ubuntu1.13+esm23.6.9-1~18.04ubuntu1.13+esm33.6.9-1~18.04ubuntu1.13+esm43.6.9-1~18.04ubuntu1.13+esm53.6.9-1~18.04ubuntu1.13+esm63.6.9-1~18.04ubuntu1.13+esm73.6.9-1~18.04ubuntu1.13+esm83.6.9-1~18.04ubuntu1.13+esm93.6.9-1~18.04ubuntu1.13+esm10 |
None known |
python3.7Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 3.7.0~a2-13.7.0~a3-13.7.0~a3-23.7.0~a3-33.7.0~a4-1 Show 21 moreShow less3.7.0~b1-13.7.0~b1-1build13.7.0~b2-13.7.0~b3-13.7.0-1~18.043.7.1-1~18.043.7.3-2~18.04.13.7.5-2~18.043.7.5-2~18.04.43.7.5-2ubuntu1~18.04.23.7.5-2ubuntu1~18.04.2+esm13.7.5-2ubuntu1~18.04.2+esm23.7.5-2ubuntu1~18.04.2+esm33.7.5-2ubuntu1~18.04.2+esm43.7.5-2ubuntu1~18.04.2+esm53.7.5-2ubuntu1~18.04.2+esm63.7.5-2ubuntu1~18.04.2+esm73.7.5-2ubuntu1~18.04.2+esm83.7.5-2ubuntu1~18.04.2+esm93.7.5-2ubuntu1~18.04.2+esm103.7.5-2ubuntu1~18.04.2+esm11 |
None known |
python3.8Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 3.8.0-3~18.043.8.0-3~18.04.13.8.0-3ubuntu1~18.04.23.8.0-3ubuntu1~18.04.2+esm13.8.0-3ubuntu1~18.04.2+esm2 Show 9 moreShow less3.8.0-3ubuntu1~18.04.2+esm33.8.0-3ubuntu1~18.04.2+esm43.8.0-3ubuntu1~18.04.2+esm53.8.0-3ubuntu1~18.04.2+esm63.8.0-3ubuntu1~18.04.2+esm73.8.0-3ubuntu1~18.04.2+esm83.8.0-3ubuntu1~18.04.2+esm93.8.0-3ubuntu1~18.04.2+esm103.8.0-3ubuntu1~18.04.2+esm11 |
None known |
python3.8Ubuntu:Pro:20.04:LTS |
All versions, plus listed versions 3.8.0-13.8.0-23.8.0-33.8.0-43.8.0-5 Show 34 moreShow less3.8.1-2ubuntu33.8.2~rc1-1ubuntu13.8.2-13.8.2-1ubuntu13.8.2-1ubuntu1.13.8.2-1ubuntu1.23.8.5-1~20.043.8.5-1~20.04.23.8.5-1~20.04.33.8.10-0ubuntu1~20.043.8.10-0ubuntu1~20.04.13.8.10-0ubuntu1~20.04.23.8.10-0ubuntu1~20.04.43.8.10-0ubuntu1~20.04.53.8.10-0ubuntu1~20.04.63.8.10-0ubuntu1~20.04.73.8.10-0ubuntu1~20.04.83.8.10-0ubuntu1~20.04.93.8.10-0ubuntu1~20.04.103.8.10-0ubuntu1~20.04.113.8.10-0ubuntu1~20.04.123.8.10-0ubuntu1~20.04.133.8.10-0ubuntu1~20.04.143.8.10-0ubuntu1~20.04.153.8.10-0ubuntu1~20.04.163.8.10-0ubuntu1~20.04.173.8.10-0ubuntu1~20.04.183.8.10-0ubuntu1~20.04.18+esm13.8.10-0ubuntu1~20.04.18+esm23.8.10-0ubuntu1~20.04.18+esm33.8.10-0ubuntu1~20.04.18+esm43.8.10-0ubuntu1~20.04.18+esm53.8.10-0ubuntu1~20.04.18+esm63.8.10-0ubuntu1~20.04.18+esm7 |
None known |
python2.7Ubuntu:Pro:20.04:LTS |
All versions, plus listed versions 2.7.17~rc1-12.7.17-12.7.17-1ubuntu52.7.17-1ubuntu62.7.18~rc1-2 Show 22 moreShow less2.7.18-1~20.042.7.18-1~20.04.12.7.18-1~20.04.1+esm12.7.18-1~20.04.32.7.18-1~20.04.3+esm12.7.18-1~20.04.42.7.18-1~20.04.4+esm12.7.18-1~20.04.4+esm22.7.18-1~20.04.4+esm32.7.18-1~20.04.52.7.18-1~20.04.5+esm12.7.18-1~20.04.5+esm22.7.18-1~20.04.62.7.18-1~20.04.6+esm12.7.18-1~20.04.72.7.18-1~20.04.7+esm32.7.18-1~20.04.7+esm42.7.18-1~20.04.7+esm62.7.18-1~20.04.7+esm72.7.18-1~20.04.7+esm82.7.18-1~20.04.7+esm92.7.18-1~20.04.7+esm10 |
None known |
python3.9Ubuntu:Pro:20.04:LTS |
All versions, plus listed versions 3.9.0~rc1-1~20.043.9.0-5~20.043.9.5-3~20.04.13.9.5-3ubuntu0~20.04.13.9.5-3ubuntu0~20.04.1+esm1 Show 10 moreShow less3.9.5-3ubuntu0~20.04.1+esm23.9.5-3ubuntu0~20.04.1+esm33.9.5-3ubuntu0~20.04.1+esm43.9.5-3ubuntu0~20.04.1+esm53.9.5-3ubuntu0~20.04.1+esm63.9.5-3ubuntu0~20.04.1+esm73.9.5-3ubuntu0~20.04.1+esm83.9.5-3ubuntu0~20.04.1+esm93.9.5-3ubuntu0~20.04.1+esm103.9.5-3ubuntu0~20.04.1+esm11 |
None known |
python3.10Ubuntu:22.04:LTS |
All versions, plus listed versions 3.10.0-23.10.0-33.10.0-43.10.0-53.10.0-5build1 Show 30 moreShow less3.10.1-13.10.1-23.10.2-13.10.2-53.10.2-73.10.3-13.10.4-33.10.4-3ubuntu0.13.10.6-1~22.043.10.6-1~22.04.13.10.6-1~22.04.23.10.6-1~22.04.2ubuntu13.10.6-1~22.04.2ubuntu1.13.10.12-1~22.04.23.10.12-1~22.04.33.10.12-1~22.04.43.10.12-1~22.04.53.10.12-1~22.04.63.10.12-1~22.04.73.10.12-1~22.04.83.10.12-1~22.04.93.10.12-1~22.04.103.10.12-1~22.04.113.10.12-1~22.04.123.10.12-1~22.04.133.10.12-1~22.04.143.10.12-1~22.04.153.10.12-1~22.04.163.10.12-1~22.04.173.10.12-1~22.04.18 |
None known |
python2.7Ubuntu:Pro:22.04:LTS |
All versions, plus listed versions 2.7.18-8build12.7.18-132.7.18-13ubuntu12.7.18-13ubuntu1.12.7.18-13ubuntu1.1+esm2 Show 16 moreShow less2.7.18-13ubuntu1.22.7.18-13ubuntu1.2+esm12.7.18-13ubuntu1.2+esm22.7.18-13ubuntu1.2+esm32.7.18-13ubuntu1.32.7.18-13ubuntu1.3+esm12.7.18-13ubuntu1.42.7.18-13ubuntu1.4+esm12.7.18-13ubuntu1.52.7.18-13ubuntu1.5+esm22.7.18-13ubuntu1.5+esm32.7.18-13ubuntu1.5+esm52.7.18-13ubuntu1.5+esm62.7.18-13ubuntu1.5+esm72.7.18-13ubuntu1.5+esm82.7.18-13ubuntu1.5+esm9 |
None known |
python3.11Ubuntu:Pro:22.04:LTS |
All versions, plus listed versions 3.11.0~rc1-1~22.043.11.0~rc1-1~22.04.1~esm13.11.0~rc1-1~22.04.1~esm23.11.0~rc1-1~22.04.1~esm33.11.0~rc1-1~22.04.1~esm4 Show 8 moreShow less3.11.0~rc1-1~22.04.1~esm53.11.0~rc1-1~22.04.1~esm63.11.0~rc1-1~22.04.1~esm73.11.0~rc1-1~22.04.1~esm83.11.0~rc1-1~22.04.1~esm93.11.0~rc1-1~22.04.13.11.0~rc1-1~22.04.1+esm13.11.0~rc1-1~22.04.1+esm2 |
None known |
python3.12Ubuntu:24.04:LTS |
All versions, plus listed versions 3.12.0-13.12.0-53.12.0-63.12.0-73.12.1-2 Show 21 moreShow less3.12.2-13.12.2-4build33.12.2-4build43.12.2-5ubuntu33.12.3-13.12.3-1ubuntu0.13.12.3-1ubuntu0.23.12.3-1ubuntu0.33.12.3-1ubuntu0.43.12.3-1ubuntu0.53.12.3-1ubuntu0.63.12.3-1ubuntu0.73.12.3-1ubuntu0.83.12.3-1ubuntu0.93.12.3-1ubuntu0.103.12.3-1ubuntu0.113.12.3-1ubuntu0.123.12.3-1ubuntu0.133.12.3-1ubuntu0.153.12.3-1ubuntu0.163.12.3-1ubuntu0.17 |
None known |
python3.14Ubuntu:26.10 |
All versions, plus listed versions 3.14.4-13.14.6-13.14.7-1ubuntu13.14.7-4ubuntu13.14.7-4ubuntu23.14.7-5ubuntu13.14.8-1ubuntu1 |
None known |
python3.14Ubuntu:26.04:LTS |
All versions, plus listed versions 3.14.0-13.14.0-23.14.0-43.14.2-13.14.3-1 Show 6 moreShow less3.14.3-23.14.3-33.14.3-53.14.4-13.14.4-1ubuntu0.13.14.4-1ubuntu0.2 |
None known |
python315openSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 3.15.2-1.1 | 3.15.2-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-115557 is a critical vulnerability (CVSS 9.4) in Python Software Foundation Cpython, published October 24, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.53%, the 45th percentile. Fixed in python3 3.12.16-r0.
References
openwall.com/lists/oss-security/2026/10/20/29
github.com/python/cpython/pull/160042
emudhra.we-have-a-problem.com
mail.python.org/archives/list/[email protected]/thread/FNAJMZV6XQYLVPABNINDMF3VF66AYLW4
Show 23 moreShow less
nvd.nist.gov/vuln/detail/CVE-2026-115557
security.alpinelinux.org/vuln/CVE-2026-115557
docs.bell-sw.com/security/cves/CVE-2026-115557
security-tracker.debian.org/tracker/CVE-2026-115557
ubuntu.com/security/CVE-2026-115557
cve.org/CVERecord?id=CVE-2026-115557
suse.com/security/cve/CVE-2026-114583