CVE-2026-19553: SSLContext.wrap_bio() missing validation of server_hostname parameter

Overview

Severity

N/A

Exploit Status

Not Exploited

Patch Tuesday

2026-Sep

Released

2026-10-03

EPSS Score

0.40% (percentile: 32.0%)

Detection & Weaponization (1 sources)

Maturity: Exploit

• GitHub PoC: 1 repositories

Affected Products (2)

Other

• 21897-17084
• 21021-17084

Revision History

• 2026-10-03: Information published.