EUVD-2026-17211Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Primary rating from GitHub Advisory.
CVSS VectorGitHub Advisory
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Lifecycle Timeline
4DescriptionGitHub Advisory
Botan is a C++ cryptography library. From version 3.0.0 to before version 3.11.0, during X509 path validation, OCSP responses were checked for an appropriate status code, but critically omitted verifying the signature of the OCSP response itself. This issue has been patched in version 3.11.0.
AnalysisAI
Botan cryptography library versions 3.0.0 through 3.10.x fail to verify OCSP response signatures during X.509 certificate path validation, allowing attackers to forge certificate status responses and potentially bypass revocation checks. This integrity bypass affects any application using Botan for TLS or certificate validation and requires network positioning but not authentication. The vulnerability was patched in version 3.11.0.
Technical ContextAI
Botan is a C++ cryptography library widely used for TLS, PKI, and cryptographic operations. During X.509 path validation, the library processes OCSP (Online Certificate Status Protocol) responses to determine whether certificates have been revoked. The vulnerability stems from a missing cryptographic signature verification step (CWE-347: Improper Verification of Cryptographic Signature). While Botan correctly checked that OCSP responses contained an appropriate status code (e.g., 'good', 'revoked', 'unknown'), it did not validate the OCSP response's digital signature, which authenticates the response's origin and integrity. An attacker positioned to intercept or manipulate OCSP responses could craft fraudulent responses with valid-looking status codes, making revoked certificates appear valid.
RemediationAI
Upgrade Botan to version 3.11.0 or later immediately. This release includes the signature verification fix for OCSP responses. Users unable to upgrade should disable OCSP validation temporarily if feasible, though this weakens revocation checking and is not a long-term solution. Patch availability is confirmed; Botan 3.11.0 contains the upstream fix. Consult the GitHub security advisory at https://github.com/randombit/botan/security/advisories/GHSA-9j2j-hqmc-hf5x for detailed guidance and version-specific deployment notes.
More in Jwt Attack
View allWhy is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update
Authentication bypass in SimpleHelp 5.5.15 and prior (plus 6.0 pre-release builds) allows remote unauthenticated attacke
Authentication bypass in Fortinet FortiOS, FortiProxy, and FortiSwitchManager allows unauthenticated remote attackers to
ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Rated critical severity (CVS
ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Rated critical severity (CVS
The package jsrsasign before 10.5.25 are vulnerable to Improper Verification of Cryptographic Signature when JWS or JWT
A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. Rated criti
A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.27
A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work
The Ruby SAML library is for implementing the client side of a SAML authorization. Rated critical severity (CVSS 9.8), t
cosign is a container signing and verification utility. Rated critical severity (CVSS 9.8), this vulnerability is remote
Biscuit is an authentication and authorization token for microservices architectures. Rated critical severity (CVSS 9.8)
Same technique Information Disclosure
View allVendor StatusVendor
Share
External POC / Exploit Code
Leaving vuln.today