Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Botan is a C++ cryptography library. From version 3.0.0 to before version 3.11.0, during X509 path validation, OCSP responses were checked for an appropriate status code, but critically omitted verifying the signature of the OCSP response itself. This issue has been patched in version 3.11.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-30 | 1 | Disclosure1 |
| 2026-03-31 | 1 | General1 |
CVE-2026-32883 Botan is a C++ cryptography library. From version 3.0.0 to before version 3.11.0, during X509 path validation, OCSP responses were checked for an appropriate status c… https://www.cve.org/CVERecord?id=CVE-2026-32883
Post summary
The post briefly outlines the scope of CVE-2026-32883 affecting Botan's OCSP validation but offers no PoC, exploit, or remediation details.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-32883 - Botan: Missing OCSP Response Signature Verification Allows MitM Certificate Revocation Bypass Intel Report: https://ift.tt/zR7OqK3
Post summary
The alert announces CVE‑2026‑32883 in Botan, noting that a missing OCSP response signature verification allows a man‑in‑the‑middle attack to bypass certificate revocation; no evidence of exploitation, PoC, or patch is provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | botan_project | botan | - | - | - |