https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:16:11.428134+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-337312 EUVD-2026-337312 2026-10-03T03:16:11.492635+00:00 EUVD-2026-337312 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34582 fkie_cve-2026-34582 2026-10-03T03:16:11.492671+00:00

Botan is a C++ cryptography library. Prior to version 3.11.1, the TLS 1.3 implementation allowed ApplicationData records to be processed prior to the Finished message being received. A server which is attempting to enforce client authentication via certificates can by bypassed by a client which entirely omits Certificate, CertificateVerify, and the Finished message and instead sends application data records. This vulnerability is fixed in 3.11.1.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:20528-1 openSUSE-SU-2026:20528-1 — Security update for Botan 2026-10-03T03:16:11.492704+00:00

Security update for Botan

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-34582 UBUNTU-CVE-2026-34582 2026-10-03T03:16:11.492741+00:00

Affected: Ubuntu:18.04:LTS: botan, Ubuntu:20.04:LTS: botan, Ubuntu:Pro:22.04:LTS: botan, Ubuntu:Pro:24.04:LTS: botan, Ubuntu:25.10: botan, Ubuntu:25.10: botan3, Ubuntu:26.04:LTS: botan3

Botan is a C++ cryptography library. Prior to version 3.11.1, the TLS 1.3 implementation allowed ApplicationData records to be processed prior to the Finished message being received. A server which is attempting to enforce client authentication via certificates can by bypassed by a client which entirely omits Certificate, CertificateVerify, and the Finished message and instead sends application data records. This vulnerability is fixed in 3.11.1.