Vulnerability in N/a
CVE-2026-45389
In OCaml-TLS before 2.1.0, the server implementation does insufficient checks of the certificate provided by the client (when doing client authentication), which allows impersonation with certificates that are not meant for client authenti…
CVSS v3 metric
CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.
Affected products
- N/a — versions n/a
References
Frequently asked questions
- What is CVE-2026-45389?
- CVE-2026-45389 is a critical-severity vulnerability in N/a. CVSS score: 9.1/10. Published 2026-06-15.
- How severe is CVE-2026-45389?
- Critical severity. CVSS v3 base score is 9.1 out of 10.