CVE-2026-119170

— UNSCOREDpublic exploit available

Published 2026-11-06 · Updated 2026-11-07

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

There was a regression in how FIPS algorithms were enforced for the hashlib module. Only users that are using OpenSSL in FIPS mode are affected. Only Python 3.14.10 is affected, all other Python versions are unaffected.

Weaknesses

CWE-693

Public exploit & PoC references

https://github.com/python/cpython/issues/160923
https://github.com/python/cpython/pull/160984

All references

https://github.com/python/cpython/issues/160923
https://github.com/python/cpython/pull/160984
https://mail.python.org/archives/list/[email protected]/thread/PXVTTOBPUMFJSSUXN6XCS7FC5DZOSZXK/
http://www.openwall.com/lists/oss-security/2026/11/06/30

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2025-54991PoC
MEDIUMCVE-2025-55002PoC
LOWCVE-2025-71424PoC
HIGHCVE-2026-100676PoC
CRITICALCVE-2026-100760
CRITICALCVE-2026-100775
HIGHCVE-2026-100808
CRITICALCVE-2026-100828

Related by shared AI tags and CWE weakness class. Browse the full archive.