← Back

CVE-2026-32883

nvd nist
Published: Mar 30, 2026Modified: Jun 17, 2026

JSON object

Loading...
5.9
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 2.2 / Impact: 3.6
Source: security-advisories@github.com (Secondary)

Description

Botan is a C++ cryptography library. From version 3.0.0 to before version 3.11.0, during X509 path validation, OCSP responses were checked for an appropriate status code, but critically omitted verifying the signature of the OCSP response itself. This issue has been patched in version 3.11.0.

Affected (1)

Products: Botan Project: Botan
Botan Project
1 product
Botan
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Botan
From 3.0.0 to 3.11.0

Related CWEs

CWE-347
Improper Verification of Cryptographic Signature
The product does not verify, or incorrectly verifies, the cryptographic signature for data.

References (1)

Source: security-advisories@github.com
Vendor Advisory

Timeline

No history available yet.