VulnSocial

CVE-2026-119170

LOWCVSS 8.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

There was a regression in how FIPS algorithms were enforced for the hashlib module. Only users that are using OpenSSL in FIPS mode are affected. Only Python 3.14.10 is affected, all other Python versions are unaffected.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-693

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Peaked 1d ago at 1 mentions (2026-11-06); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-11-06: 1Mentions · 2026-11-07: 111-0611-07
Referenced assets2 URLs
Full discourse2 posts
  • めぐみ🌸Coder × FP@oubai1108

    Python（CPython）3.14.10に脆弱性（CVE-2026-119170）。 影響するのはFIPSモード利用時のみ。 https://nvd.nist.gov/vuln/detail/CVE-2026-119170

    0000011
    221 followersView on X
  • SecNews@SecNews_GR

    CVE-2026-119170: Η Python 3.14.10 χειρίζεται λάθος τη λειτουργία FIPS https://www.secnews.gr/749026/cpython-fips-cve-2026-119170-hashlib/?fsp_sid=23024

    0000092
    7.0K followersView on X

Explore more

Back to dashboard