CVE-2026-115557

ADVISORY - nist

Summary

Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-299⁠

Improper Check for Certificate Revocation

Impacted images

Advisories

Docker

CREATED

23 hours ago

UPDATED

13 hours ago

ADVISORY ID

CVE-2026-115557

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

NIST

CREATED

22 hours ago

UPDATED

12 hours ago

ADVISORY IDCVE-2026-115557⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-299⁠

CVSS SCORE

9.4critical

Debian

CREATED

12 hours ago

UPDATED

7 hours ago

ADVISORY IDCVE-2026-115557⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow