CVE-2026-34580
Last modified
CVE-2026-34580 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Botan is a C++ cryptography library. In 3.11.0, the function Certificate_Store::certificate_known had a misleading name; it would return true if any certificate in the store had a DN (and subject key identifier, if set) matching that of the argument. EPSS estimates a 0.25% chance of exploitation in the next 30 days.
Description
Botan is a C++ cryptography library. In 3.11.0, the function Certificate_Store::certificate_known had a misleading name; it would return true if any certificate in the store had a DN (and subject key identifier, if set) matching that of the argument. It did not check that the cert it found and the cert it was passed were actually the same certificate. In 3.11.0 an extension of path validation logic was made which assumed that certificate_known only returned true if the certificates were in fact identical. The impact is that if an end entity certificate is presented, and its DN (and subject key identifier, if set) match that of any trusted root, the end entity certificate is accepted immediately as if it itself were a trusted root. , This vulnerability is fixed in 3.11.1.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Botan Project | Botan | 3.11.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2026-34580?
How severe is CVE-2026-34580?
How do I fix CVE-2026-34580?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-34573Parse Server is an open source backend that can be deployed …7.5
- CVE-2026-34574Parse Server is an open source backend that can be deployed …5.4
- CVE-2026-34576Postiz is an AI social media scheduling tool. Prior to versi…7.7
- CVE-2026-34577Postiz is an AI social media scheduling tool. Prior to versi…8.6
- CVE-2026-34578OPNsense is a FreeBSD based firewall and routing platform. P…8.2
- CVE-2026-34579Mantis Bug Tracker (MantisBT) is an open source issue tracke…5.3
- CVE-2026-34581goshs is a SimpleHTTPServer written in Go. From version 1.1.…8.1
- CVE-2026-34582Botan is a C++ cryptography library. Prior to version 3.11.1…9.1
- CVE-2026-34584listmonk is a standalone, self-hosted, newsletter and mailin…5.4
- CVE-2026-34585SiYuan is a personal knowledge management system. Prior to v…8.2
- CVE-2026-34586PdfDing is a selfhosted PDF manager, viewer and editor offer…6.5
- CVE-2026-34587Kirby is an open-source content management system. Prior to …8.1
Are you affected by CVE-2026-34580?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST