27154 matches found
GHSA-55QG-VVGJ-FFH4
creationtimestamp| type| source ---|---|--- 2026-03-30 23:20:18+00:00| seen| Telegram/qLRVxcBpXTmPFtTmfhugZI-eibNxK7vt9WwygicfOox0-Q...
Improper Verification of Cryptographic Signature
Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the OCSP response validation process. An attacker can bypass certificate revocation checks by providing a forged OCSP response, potentially enabling man-in-the-middle attacks...
ALPINE-CVE-2026-32883
Botan is a C++ cryptography library. From version 3.0.0 to before version 3.11.0, during X509 path validation, OCSP responses were checked for an appropriate status code, but critically omitted verifying the signature of the OCSP response itself. This issue has been patched in version 3.11.0...
DEBIAN-CVE-2026-32883
Botan is a C++ cryptography library. From version 3.0.0 to before version 3.11.0, during X509 path validation, OCSP responses were checked for an appropriate status code, but critically omitted verifying the signature of the OCSP response itself. This issue has been patched in version 3.11.0...
UBUNTU-CVE-2026-32883
Botan is a C++ cryptography library. From version 3.0.0 to before version 3.11.0, during X509 path validation, OCSP responses were checked for an appropriate status code, but critically omitted verifying the signature of the OCSP response itself. This issue has been patched in version 3.11.0...
CVE-2026-32883
Botan is a C++ cryptography library. From version 3.0.0 to before version 3.11.0, during X509 path validation, OCSP responses were checked for an appropriate status code, but critically omitted verifying the signature of the OCSP response itself. This issue has been patched in version 3.11.0...
CVE-2026-32883 Botan: Missing OCSP Response Signature Verification Allows MitM Certificate Revocation Bypass
Botan is a C++ cryptography library. From version 3.0.0 to before version 3.11.0, during X509 path validation, OCSP responses were checked for an appropriate status code, but critically omitted verifying the signature of the OCSP response itself. This issue has been patched in version 3.11.0...
EUVD-2026-17211
Botan is a C++ cryptography library. From version 3.0.0 to before version 3.11.0, during X509 path validation, OCSP responses were checked for an appropriate status code, but critically omitted verifying the signature of the OCSP response itself. This issue has been patched in version 3.11.0...
CVE-2026-32883
CVE-2026-32883 affects the Botan C++ cryptography library. From version 3.0.0 through before 3.11.0, during X509 path validation, OCSP responses were checked for a valid status but the OCSP response signature itself was not verified, enabling a potential Man‑in‑the‑Middle in certificate revocatio...
CVE-2026-32883
Botan is a C++ cryptography library. From version 3.0.0 to before version 3.11.0, during X509 path validation, OCSP responses were checked for an appropriate status code, but critically omitted verifying the signature of the OCSP response itself. This issue has been patched in version 3.11.0...
CVE-2026-32883 Botan: Missing OCSP Response Signature Verification Allows MitM Certificate Revocation Bypass
Botan is a C++ cryptography library. From version 3.0.0 to before version 3.11.0, during X509 path validation, OCSP responses were checked for an appropriate status code, but critically omitted verifying the signature of the OCSP response itself. This issue has been patched in version 3.11.0...
CVE-2026-32883 Botan: Missing OCSP Response Signature Verification Allows MitM Certificate Revocation Bypass
Botan is a C++ cryptography library. From version 3.0.0 to before version 3.11.0, during X509 path validation, OCSP responses were checked for an appropriate status code, but critically omitted verifying the signature of the OCSP response itself. This issue has been patched in version 3.11.0...
CVE-2026-35641
creationtimestamp| type| source ---|---|--- 2026-03-30 18:52:09+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-m3mh-3mpg-37hw 2026-04-10 19:30:36+00:00| published-proof-of-concept| Telegram/-hUuw8aTFVWSQYPf3qEKqcT3Zmmt4K4bisrN5sFAqL07rbc 2026-04-11 09:00:08+00:00| seen|...
CVE-2026-4046
creationtimestamp| type| source ---|---|--- 2026-03-30 18:21:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micbozbv4o2x 2026-03-30 19:17:51+00:00| published-proof-of-concept| Telegram/fjirMqbI7HbDe3OLZhJWgKP9iQtg8z94oAYRFGU8rTUaV0 2026-03-30 20:23:41+00:00| seen|...
GHSA-C83F-3XP6-HFCP
creationtimestamp| type| source ---|---|--- 2026-03-30 17:22:57+00:00| seen| Telegram/hICGoMiiTAfNGiGPS6kLuEIjx0Cnqs2qprpkS-tW4S4edfo...
CVE-2026-5156
creationtimestamp| type| source ---|---|--- 2026-03-30 14:14:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116318539050863116 2026-03-30 23:57:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3micuhy5sym2i 2026-03-31 01:16:25+00:00| published-proof-of-concept|...
CVE-2026-5154
creationtimestamp| type| source ---|---|--- 2026-03-30 14:00:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116318483680166062 2026-03-31 00:40:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3micwuxxml72q 2026-03-31 01:16:25+00:00| published-proof-of-concept|...
CVE-2026-5152
creationtimestamp| type| source ---|---|--- 2026-03-30 13:46:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116318430443350067 2026-03-30 23:20:23+00:00| published-proof-of-concept| Telegram/dTdXmSClQuUutduSI7B7lq8U0lWyZCa4SY-4SfXv6kqarNA 2026-03-31 00:25:56+00:00| seen|...