CPython skips server identity checks in ssl.get_server_certificate
Python rates CVE-2026-19552 low: with ca_certs set, the call checks the chain but not the server identity.
Stories per day · 30 days
2 RSS
Relatedtls3python2abuseipdb1certificate-authority1certificates1certificate-validation1cpython1denylist1dnsbl1email-authentication1open-source1
7 stories, newest first · one card per story
Stories tagged #ssl
AbuseBox open-source tool monitors DNS blacklists, SSL and email records
It scans 60 DNSBLs plus AbuseIPDB, SPF, DKIM and DMARC, and alerts by email, Slack, Discord or webhook.
1
Python ssl module denylists compromised intermediates (CVE-2026-115557)
The notice says the denylist should protect users even when those certificates are not yet removed elsewhere.
eMudhra exits SSL/TLS business after weak CA keys found
Researcher recovered private keys of eight intermediate CAs that were below 256 bits, leading to root distrust and business exit.
CPython [CVE-2026-19445] Use-after-free of a server-side SSLContext when sni_callback switches contexts
CPython CVE-2026-19445 is a critical use-after-free when a server SNI callback switches SSL contexts.
Cisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service Vulnerability
Cisco fixed an SSL certificate parsing flaw in FTD's Snort 2 engine letting unauthenticated remote attackers force detection engine restarts.
Iranian banks' SSL certificates are being revoked due to OFAC sanctions
OFAC sanctions are reportedly causing Iranian banks' SSL certificates to be revoked, threatening secure HTTPS access to their services.