Vulnerability in Python Software Foundation Cpython

CVE-2026-19552

When ca_certs parameter was supplied to ssl.get_server_certificate() function, the identity of the certificate is not checked.

Published · last modified .

EPSS exploit prediction

No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.

Affected products

References