Search: CVE-2026-116566

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-116566Python Software Foundation CPython · Improper Neutralization of Null Byte or NUL Character Medium5.3EPSS 0.3%2026-10-29CVE Database V5CVE-2026-116566 CVE-2026-116566 is a vulnerability in the Python Software Foundation's CPython implementation where the socket.getaddrinfo() function accepted null bytes in the host and port parameters, leading to silent truncation of these values. This flaw was present in all versions prior to 3.16.0 and has a medium severity rating. The issue has been fixed in CPython version 3.16.0. EPSS 0.3%Vulnerability CWE-158	CVE Database V5	2026-10-29

Page 1 of 1 · 3 duplicate CVE records merged