Signature Verification Vulnerability in Botan Cryptography Library

CVE-2026-32883

What is CVE-2026-32883?

The Botan cryptography library, utilized in various applications for secure cryptographic operations, has a vulnerability in its handling of Online Certificate Status Protocol (OCSP) responses. Specifically, prior to version 3.11.0, the library failed to verify the signature of OCSP responses during X509 path validation, despite checking for a valid status code. This omission potentially allows an attacker to serve malicious OCSP responses, undermining the integrity of certificate validation processes. The issue has been addressed in version 3.11.0 of Botan, emphasizing the importance of updating to this version to mitigate associated risks.

References