1. Home
  2. CVE Database
  3. CVE-2026-32883
MEDIUM · 5.9

CVE-2026-32883

Botan is a C++ cryptography library. From version 3.0.0 to before version 3.11.0, during X509 path validation, OCSP responses were checked for an appropriate status code, but critically omitted verify...

Vulnerability Description

Botan is a C++ cryptography library. From version 3.0.0 to before version 3.11.0, during X509 path validation, OCSP responses were checked for an appropriate status code, but critically omitted verifying the signature of the OCSP response itself. This issue has been patched in version 3.11.0.

CVSS Score

5.9

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
Botan ProjectBotan>= 3.0.0, < 3.11.0

Related Weaknesses (CWE)

CWE-347

References

FAQ

What is CVE-2026-32883?

CVE-2026-32883 is a vulnerability with a CVSS score of 5.9 (MEDIUM). Botan is a C++ cryptography library. From version 3.0.0 to before version 3.11.0, during X509 path validation, OCSP responses were checked for an appropriate status code, but critically omitted verify...

How severe is CVE-2026-32883?

CVE-2026-32883 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-32883?

Check the references section above for vendor advisories and patch information. Affected products include: Botan Project Botan.