CVE-2026-71303 | Netflix Lemur up to 1.9.2 Authority Service service.py _validate_acme_url certificate validation

August 18, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Netflix Lemur up to 1.9.2. Affected by this issue is the function _validate_acme_url of the file lemur/authorities/service.py of the component Authority Service. The manipulation of the argument acme_url leads to improper certificate validation.

This vulnerability is documented as CVE-2026-71303. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More