This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-32883 | BDVDB-2026-323738 Detail

randombitbotan

Description#

Botan is a C++ cryptography library. From version 3.0.0 to before version 3.11.0, during X509 path validation, OCSP responses were checked for an appropriate status code, but critically omitted verifying the signature of the OCSP response itself. This issue has been patched in version 3.11.0.

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact high, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-347 Improper Verification of Cryptographic Signature

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.