CVE-2026-45389highCWE-295

CVE-2026-45389

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.4epss 0.2%

probabilidade de exploração

0.2%top 91% das CVEs

exploração observada

nãonenhuma fonte reporta

In OCaml-TLS before 2.1.0, the server implementation does insufficient checks of the certificate provided by the client (when doing client authentication), which allows impersonation with certificates that are not meant for client authentication (because of KeyUsage and ExtendedKeyUsage).

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Produtos afetados

n/a · n/a

Referências

https://osv.dev/vulnerability/OSEC-2026-07