Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackCVE-2026-19445
By Mor Plada |
1 October 2026
CVE-2026-19445 – CPython ssl SNI context switch triggers SSLContext use-after-free
A remote, unauthenticated TLS client can trigger a server crash or call through a freed pointer when an sni_callback switches SSLSocket.context and the original ssl.SSLContext is no longer referenced. Affects CPython ssl: < 3.12.15, `3.13.0-