CVE-2026-118766 | randombit Botan up to 3.12.x Online OCSP Client server-side request forgery

October 29, 2026 Yanac

A vulnerability has been found in randombit Botan up to 3.12.x and classified as critical. Impacted is an unknown function of the component Online OCSP Client. Performing a manipulation results in server-side request forgery.

This vulnerability is reported as CVE-2026-118766. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More