# CVE-2026-115557: Distrust compromised intermediate certificates in ssl module

CVE-2026-115557 is fixed in 56 products on 3 platforms, first by Python 3.14 3.14.10, released October 25, 2026. 11 other affected products have no fix yet. It is not reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/cve/CVE-2026-115557
- Priority: Urgent
- CVSS: 9.4 (Critical)
- EPSS: 0.0053
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Oct 24, 2026
- Weakness: Improper Check for Certificate Revocation
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-115557

## Description

Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Python 3.14 | 3.14.10 | [Python 3.14 3.14.10](https://patchblox.com/security/data/fix/windows-app/python.python.3.14-3.14.10.md) | Oct 25, 2026 |
| Linux | python-unversioned-command Fedora 43 | 3.14.10-1.fc43 | [FEDORA-2026-1520DEDF55](https://patchblox.com/security/data/fix/linux/fedora-2026-1520dedf55.md) | Nov 10, 2026 |
| Linux | python3 Fedora 43 | 3.14.10-1.fc43 | [FEDORA-2026-1520DEDF55](https://patchblox.com/security/data/fix/linux/fedora-2026-1520dedf55.md) | Nov 10, 2026 |
| Linux | python3-debug Fedora 43 | 3.14.10-1.fc43 | [FEDORA-2026-1520DEDF55](https://patchblox.com/security/data/fix/linux/fedora-2026-1520dedf55.md) | Nov 10, 2026 |
| Linux | python3-devel Fedora 43 | 3.14.10-1.fc43 | [FEDORA-2026-1520DEDF55](https://patchblox.com/security/data/fix/linux/fedora-2026-1520dedf55.md) | Nov 10, 2026 |
| Linux | python3-docs Fedora 43 | 3.14.10-1.fc43 | [FEDORA-2026-1520DEDF55](https://patchblox.com/security/data/fix/linux/fedora-2026-1520dedf55.md) | Nov 10, 2026 |
| Linux | python3-idle Fedora 43 | 3.14.10-1.fc43 | [FEDORA-2026-1520DEDF55](https://patchblox.com/security/data/fix/linux/fedora-2026-1520dedf55.md) | Nov 10, 2026 |
| Linux | python3-libs Fedora 43 | 3.14.10-1.fc43 | [FEDORA-2026-1520DEDF55](https://patchblox.com/security/data/fix/linux/fedora-2026-1520dedf55.md) | Nov 10, 2026 |
| Linux | python3-test Fedora 43 | 3.14.10-1.fc43 | [FEDORA-2026-1520DEDF55](https://patchblox.com/security/data/fix/linux/fedora-2026-1520dedf55.md) | Nov 10, 2026 |
| Linux | python3-tkinter Fedora 43 | 3.14.10-1.fc43 | [FEDORA-2026-1520DEDF55](https://patchblox.com/security/data/fix/linux/fedora-2026-1520dedf55.md) | Nov 10, 2026 |
| Linux | python3.11 amzn 2023 | 3.11.18-1.amzn2023.0.1 | [ALAS2023-2026-3356](https://patchblox.com/security/data/fix/linux/alas2023-2026-3356.md) | Nov 7, 2026 |
| Linux | python3.11-debug amzn 2023 | 3.11.18-1.amzn2023.0.1 | [ALAS2023-2026-3356](https://patchblox.com/security/data/fix/linux/alas2023-2026-3356.md) | Nov 7, 2026 |
| Linux | python3.11-debuginfo amzn 2023 | 3.11.18-1.amzn2023.0.1 | [ALAS2023-2026-3356](https://patchblox.com/security/data/fix/linux/alas2023-2026-3356.md) | Nov 7, 2026 |
| Linux | python3.11-debugsource amzn 2023 | 3.11.18-1.amzn2023.0.1 | [ALAS2023-2026-3356](https://patchblox.com/security/data/fix/linux/alas2023-2026-3356.md) | Nov 7, 2026 |
| Linux | python3.11-devel amzn 2023 | 3.11.18-1.amzn2023.0.1 | [ALAS2023-2026-3356](https://patchblox.com/security/data/fix/linux/alas2023-2026-3356.md) | Nov 7, 2026 |
| Linux | python3.11-idle amzn 2023 | 3.11.18-1.amzn2023.0.1 | [ALAS2023-2026-3356](https://patchblox.com/security/data/fix/linux/alas2023-2026-3356.md) | Nov 7, 2026 |
| Linux | python3.11-libs amzn 2023 | 3.11.18-1.amzn2023.0.1 | [ALAS2023-2026-3356](https://patchblox.com/security/data/fix/linux/alas2023-2026-3356.md) | Nov 7, 2026 |
| Linux | python3.11-test amzn 2023 | 3.11.18-1.amzn2023.0.1 | [ALAS2023-2026-3356](https://patchblox.com/security/data/fix/linux/alas2023-2026-3356.md) | Nov 7, 2026 |
| Linux | python3.11-tkinter amzn 2023 | 3.11.18-1.amzn2023.0.1 | [ALAS2023-2026-3356](https://patchblox.com/security/data/fix/linux/alas2023-2026-3356.md) | Nov 7, 2026 |
| Linux | python3.12 Fedora 43 | 3.12.16-2.fc43 | [FEDORA-2026-4E3279AF04](https://patchblox.com/security/data/fix/linux/fedora-2026-4e3279af04.md) | Nov 8, 2026 |
| Linux | python3.12 amzn 2023 | 3.12.16-2.amzn2023.0.1 | [ALAS2023-2026-3408](https://patchblox.com/security/data/fix/linux/alas2023-2026-3408.md) | Nov 10, 2026 |
| Linux | python3.12-debug Fedora 43 | 3.12.16-2.fc43 | [FEDORA-2026-4E3279AF04](https://patchblox.com/security/data/fix/linux/fedora-2026-4e3279af04.md) | Nov 8, 2026 |
| Linux | python3.12-debug amzn 2023 | 3.12.16-2.amzn2023.0.1 | [ALAS2023-2026-3408](https://patchblox.com/security/data/fix/linux/alas2023-2026-3408.md) | Nov 10, 2026 |
| Linux | python3.12-debuginfo Fedora 43 | 3.12.16-2.fc43 | [FEDORA-2026-4E3279AF04](https://patchblox.com/security/data/fix/linux/fedora-2026-4e3279af04.md) | Nov 8, 2026 |
| Linux | python3.12-debuginfo amzn 2023 | 3.12.16-2.amzn2023.0.1 | [ALAS2023-2026-3408](https://patchblox.com/security/data/fix/linux/alas2023-2026-3408.md) | Nov 10, 2026 |
| Linux | python3.12-debugsource Fedora 43 | 3.12.16-2.fc43 | [FEDORA-2026-4E3279AF04](https://patchblox.com/security/data/fix/linux/fedora-2026-4e3279af04.md) | Nov 8, 2026 |
| Linux | python3.12-debugsource amzn 2023 | 3.12.16-2.amzn2023.0.1 | [ALAS2023-2026-3408](https://patchblox.com/security/data/fix/linux/alas2023-2026-3408.md) | Nov 10, 2026 |
| Linux | python3.12-devel Fedora 43 | 3.12.16-2.fc43 | [FEDORA-2026-4E3279AF04](https://patchblox.com/security/data/fix/linux/fedora-2026-4e3279af04.md) | Nov 8, 2026 |
| Linux | python3.12-devel amzn 2023 | 3.12.16-2.amzn2023.0.1 | [ALAS2023-2026-3408](https://patchblox.com/security/data/fix/linux/alas2023-2026-3408.md) | Nov 10, 2026 |
| Linux | python3.12-idle Fedora 43 | 3.12.16-2.fc43 | [FEDORA-2026-4E3279AF04](https://patchblox.com/security/data/fix/linux/fedora-2026-4e3279af04.md) | Nov 8, 2026 |
| Linux | python3.12-idle amzn 2023 | 3.12.16-2.amzn2023.0.1 | [ALAS2023-2026-3408](https://patchblox.com/security/data/fix/linux/alas2023-2026-3408.md) | Nov 10, 2026 |
| Linux | python3.12-libs Fedora 43 | 3.12.16-2.fc43 | [FEDORA-2026-4E3279AF04](https://patchblox.com/security/data/fix/linux/fedora-2026-4e3279af04.md) | Nov 8, 2026 |
| Linux | python3.12-libs amzn 2023 | 3.12.16-2.amzn2023.0.1 | [ALAS2023-2026-3408](https://patchblox.com/security/data/fix/linux/alas2023-2026-3408.md) | Nov 10, 2026 |
| Linux | python3.12-test Fedora 43 | 3.12.16-2.fc43 | [FEDORA-2026-4E3279AF04](https://patchblox.com/security/data/fix/linux/fedora-2026-4e3279af04.md) | Nov 8, 2026 |
| Linux | python3.12-test amzn 2023 | 3.12.16-2.amzn2023.0.1 | [ALAS2023-2026-3408](https://patchblox.com/security/data/fix/linux/alas2023-2026-3408.md) | Nov 10, 2026 |
| Linux | python3.12-tkinter Fedora 43 | 3.12.16-2.fc43 | [FEDORA-2026-4E3279AF04](https://patchblox.com/security/data/fix/linux/fedora-2026-4e3279af04.md) | Nov 8, 2026 |
| Linux | python3.12-tkinter amzn 2023 | 3.12.16-2.amzn2023.0.1 | [ALAS2023-2026-3408](https://patchblox.com/security/data/fix/linux/alas2023-2026-3408.md) | Nov 10, 2026 |
| Linux | python3.13 amzn 2023 | 3.13.18-1.amzn2023.0.1 | [ALAS2023-2026-3407](https://patchblox.com/security/data/fix/linux/alas2023-2026-3407.md) | Nov 10, 2026 |
| Linux | python3.13-debug amzn 2023 | 3.13.18-1.amzn2023.0.1 | [ALAS2023-2026-3407](https://patchblox.com/security/data/fix/linux/alas2023-2026-3407.md) | Nov 10, 2026 |
| Linux | python3.13-debuginfo amzn 2023 | 3.13.18-1.amzn2023.0.1 | [ALAS2023-2026-3407](https://patchblox.com/security/data/fix/linux/alas2023-2026-3407.md) | Nov 10, 2026 |
| Linux | python3.13-debugsource amzn 2023 | 3.13.18-1.amzn2023.0.1 | [ALAS2023-2026-3407](https://patchblox.com/security/data/fix/linux/alas2023-2026-3407.md) | Nov 10, 2026 |
| Linux | python3.13-devel amzn 2023 | 3.13.18-1.amzn2023.0.1 | [ALAS2023-2026-3407](https://patchblox.com/security/data/fix/linux/alas2023-2026-3407.md) | Nov 10, 2026 |
| Linux | python3.13-freethreading amzn 2023 | 3.13.18-1.amzn2023.0.1 | [ALAS2023-2026-3407](https://patchblox.com/security/data/fix/linux/alas2023-2026-3407.md) | Nov 10, 2026 |
| Linux | python3.13-freethreading-debug amzn 2023 | 3.13.18-1.amzn2023.0.1 | [ALAS2023-2026-3407](https://patchblox.com/security/data/fix/linux/alas2023-2026-3407.md) | Nov 10, 2026 |
| Linux | python3.13-idle amzn 2023 | 3.13.18-1.amzn2023.0.1 | [ALAS2023-2026-3407](https://patchblox.com/security/data/fix/linux/alas2023-2026-3407.md) | Nov 10, 2026 |
| Linux | python3.13-libs amzn 2023 | 3.13.18-1.amzn2023.0.1 | [ALAS2023-2026-3407](https://patchblox.com/security/data/fix/linux/alas2023-2026-3407.md) | Nov 10, 2026 |
| Linux | python3.13-test amzn 2023 | 3.13.18-1.amzn2023.0.1 | [ALAS2023-2026-3407](https://patchblox.com/security/data/fix/linux/alas2023-2026-3407.md) | Nov 10, 2026 |
| Linux | python3.13-tkinter amzn 2023 | 3.13.18-1.amzn2023.0.1 | [ALAS2023-2026-3407](https://patchblox.com/security/data/fix/linux/alas2023-2026-3407.md) | Nov 10, 2026 |
| Linux | python3.14 Debian 14 | 3.14.10-1 | [DEBIAN-CVE-2026-115557](https://patchblox.com/security/data/fix/linux/debian-cve-2026-115557.md) | Nov 3, 2026 |
| Linux | python3.14 Fedora 43 | 3.14.10-1.fc43 | [FEDORA-2026-1520DEDF55](https://patchblox.com/security/data/fix/linux/fedora-2026-1520dedf55.md) | Nov 10, 2026 |
| Linux | python3.14 amzn 2023 | 3.14.10-1.amzn2023.0.1 | [ALAS2023-2026-3406](https://patchblox.com/security/data/fix/linux/alas2023-2026-3406.md) | Nov 10, 2026 |
| Linux | python3.14-debug amzn 2023 | 3.14.10-1.amzn2023.0.1 | [ALAS2023-2026-3406](https://patchblox.com/security/data/fix/linux/alas2023-2026-3406.md) | Nov 10, 2026 |
| Linux | python3.14-debuginfo Fedora 43 | 3.14.10-1.fc43 | [FEDORA-2026-1520DEDF55](https://patchblox.com/security/data/fix/linux/fedora-2026-1520dedf55.md) | Nov 10, 2026 |
| Linux | python3.14-debuginfo amzn 2023 | 3.14.10-1.amzn2023.0.1 | [ALAS2023-2026-3406](https://patchblox.com/security/data/fix/linux/alas2023-2026-3406.md) | Nov 10, 2026 |
| Linux | python3.14-debugsource Fedora 43 | 3.14.10-1.fc43 | [FEDORA-2026-1520DEDF55](https://patchblox.com/security/data/fix/linux/fedora-2026-1520dedf55.md) | Nov 10, 2026 |
| Linux | python3.14-debugsource amzn 2023 | 3.14.10-1.amzn2023.0.1 | [ALAS2023-2026-3406](https://patchblox.com/security/data/fix/linux/alas2023-2026-3406.md) | Nov 10, 2026 |
| Linux | python3.14-devel amzn 2023 | 3.14.10-1.amzn2023.0.1 | [ALAS2023-2026-3406](https://patchblox.com/security/data/fix/linux/alas2023-2026-3406.md) | Nov 10, 2026 |
| Linux | python3.14-freethreading Fedora 43 | 3.14.10-1.fc43 | [FEDORA-2026-1520DEDF55](https://patchblox.com/security/data/fix/linux/fedora-2026-1520dedf55.md) | Nov 10, 2026 |
| Linux | python3.14-freethreading amzn 2023 | 3.14.10-1.amzn2023.0.1 | [ALAS2023-2026-3406](https://patchblox.com/security/data/fix/linux/alas2023-2026-3406.md) | Nov 10, 2026 |
| Linux | python3.14-freethreading-debug Fedora 43 | 3.14.10-1.fc43 | [FEDORA-2026-1520DEDF55](https://patchblox.com/security/data/fix/linux/fedora-2026-1520dedf55.md) | Nov 10, 2026 |
| Linux | python3.14-freethreading-debug amzn 2023 | 3.14.10-1.amzn2023.0.1 | [ALAS2023-2026-3406](https://patchblox.com/security/data/fix/linux/alas2023-2026-3406.md) | Nov 10, 2026 |
| Linux | python3.14-freethreading-devel Fedora 43 | 3.14.10-1.fc43 | [FEDORA-2026-1520DEDF55](https://patchblox.com/security/data/fix/linux/fedora-2026-1520dedf55.md) | Nov 10, 2026 |
| Linux | python3.14-freethreading-devel amzn 2023 | 3.14.10-1.amzn2023.0.1 | [ALAS2023-2026-3406](https://patchblox.com/security/data/fix/linux/alas2023-2026-3406.md) | Nov 10, 2026 |
| Linux | python3.14-freethreading-idle Fedora 43 | 3.14.10-1.fc43 | [FEDORA-2026-1520DEDF55](https://patchblox.com/security/data/fix/linux/fedora-2026-1520dedf55.md) | Nov 10, 2026 |
| Linux | python3.14-freethreading-idle amzn 2023 | 3.14.10-1.amzn2023.0.1 | [ALAS2023-2026-3406](https://patchblox.com/security/data/fix/linux/alas2023-2026-3406.md) | Nov 10, 2026 |
| Linux | python3.14-freethreading-libs Fedora 43 | 3.14.10-1.fc43 | [FEDORA-2026-1520DEDF55](https://patchblox.com/security/data/fix/linux/fedora-2026-1520dedf55.md) | Nov 10, 2026 |
| Linux | python3.14-freethreading-libs amzn 2023 | 3.14.10-1.amzn2023.0.1 | [ALAS2023-2026-3406](https://patchblox.com/security/data/fix/linux/alas2023-2026-3406.md) | Nov 10, 2026 |
| Linux | python3.14-freethreading-test Fedora 43 | 3.14.10-1.fc43 | [FEDORA-2026-1520DEDF55](https://patchblox.com/security/data/fix/linux/fedora-2026-1520dedf55.md) | Nov 10, 2026 |
| Linux | python3.14-freethreading-test amzn 2023 | 3.14.10-1.amzn2023.0.1 | [ALAS2023-2026-3406](https://patchblox.com/security/data/fix/linux/alas2023-2026-3406.md) | Nov 10, 2026 |
| Linux | python3.14-freethreading-tkinter Fedora 43 | 3.14.10-1.fc43 | [FEDORA-2026-1520DEDF55](https://patchblox.com/security/data/fix/linux/fedora-2026-1520dedf55.md) | Nov 10, 2026 |
| Linux | python3.14-freethreading-tkinter amzn 2023 | 3.14.10-1.amzn2023.0.1 | [ALAS2023-2026-3406](https://patchblox.com/security/data/fix/linux/alas2023-2026-3406.md) | Nov 10, 2026 |
| Linux | python3.14-idle amzn 2023 | 3.14.10-1.amzn2023.0.1 | [ALAS2023-2026-3406](https://patchblox.com/security/data/fix/linux/alas2023-2026-3406.md) | Nov 10, 2026 |
| Linux | python3.14-libs amzn 2023 | 3.14.10-1.amzn2023.0.1 | [ALAS2023-2026-3406](https://patchblox.com/security/data/fix/linux/alas2023-2026-3406.md) | Nov 10, 2026 |
| Linux | python3.14-test amzn 2023 | 3.14.10-1.amzn2023.0.1 | [ALAS2023-2026-3406](https://patchblox.com/security/data/fix/linux/alas2023-2026-3406.md) | Nov 10, 2026 |
| Linux | python3.14-tkinter amzn 2023 | 3.14.10-1.amzn2023.0.1 | [ALAS2023-2026-3406](https://patchblox.com/security/data/fix/linux/alas2023-2026-3406.md) | Nov 10, 2026 |
| Linux | python3.15 Debian 14 | 3.15.2-1 | [DEBIAN-CVE-2026-115557](https://patchblox.com/security/data/fix/linux/debian-cve-2026-115557.md) | Nov 3, 2026 |

## No fix yet

| Platform | Product | Status |
|---|---|---|
| Windows apps | Python 2 | no-fix |
| Windows apps | Python 3.10 | no-fix |
| Windows apps | Python 3.11 | no-fix |
| Windows apps | Python 3.12 | no-fix |
| Windows apps | Python 3.13 | no-fix |
| Windows apps | Python 3.5 | no-fix |
| Windows apps | Python 3.6 | no-fix |
| Windows apps | Python 3.7 | no-fix |
| Windows apps | Python 3.8 | no-fix |
| Windows apps | Python 3.9 | no-fix |
| macOS | Python3 | no-fix |

---

Data as of 2026-11-10T07:50:38Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.