Vulnerability DatabaseCVE-2026-19552
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2026-19552
Published:November 09, 2026
Updated:November 10, 2026
When ca_certs parameter was supplied to ssl.get_server_certificate() function, the identity of the certificate is not checked.
Related Resources (6)
https://github.com/python/cpython/commit/8dde46eaa6baf5f027a7234845b20d50b509624e
https://github.com/python/cpython/pull/161507
https://nvd.nist.gov/vuln/detail/CVE-2026-19552
http://www.openwall.com/lists/oss-security/2026/11/09/25
https://github.com/python/cpython/issues/161503
https://mail.python.org/archives/list/security-announce@python.org/thread/SXBD6BGHDBTGM4KSUMQEWYIQ5RO4BQ76/
Do you need more information?
Contact Us
Weakness Type (CWE)
Improper Validation of Certificate with Host Mismatch
CWE-297