Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Botan is a C++ cryptography library. Prior to version 3.11.1, the TLS 1.3 implementation allowed ApplicationData records to be processed prior to the Finished message being received. A server which is attempting to enforce client authentication via certificates can by bypassed by a client which entirely omits Certificate, CertificateVerify, and the Finished message and instead sends application data records. This vulnerability is fixed in 3.11.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-34582 Botan is a C++ cryptography library. Prior to version 3.11.1, the TLS 1.3 implementation allowed ApplicationData records to be processed prior to the Finished message… https://www.cve.org/CVERecord?id=CVE-2026-34582
Post summary
The CVE-2026-34582 flaw in Botan's TLS 1.3 implementation permits early processing of ApplicationData before the Finished message, and it is fixed as of version 3.11.1.
CVE-2026-34582 TLS 1.3 ApplicationData Processing Prior to Finished Message in Botan https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-34582
Post summary
The post announces the discovery of CVE‑2026‑34582, a TLS 1.3 processing flaw in the Botan library, but offers no PoC, exploit code, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | botan_project | botan | - | - | - |