OT
Product
OTP
On CISA KEVExploited in the wild
65
CVEs
1
On KEV
10.0
Max CVSS
3
New 30D
Severity mix
Critical 6High 28Medium 26Low 3
Watch
Add OTP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-54891 | 3.7 | Jul 2 | Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl Affected: 17.0 before 27.3.4.14; 28.0 before 28.5.0.3; 29.0 before 29.0.3; 5.3.4 before 11.2.12.10; 11.3 before 11.6.0.3; 11.7 before 11.7.3; +1 more |
| CVE-2026-42791 | 3.7 | May 27 | OCSP responder certificate validity period not checked in public_key Affected: 1.16; 27.0; 2b1a742c651b90f8a7a1fb2ddde73f29915ea376 |
| CVE-2026-28810 | 3.7 | Apr 7 | Predictable DNS Transaction IDs Enable Cache Poisoning in Built-in Resolver Affected: 3.0; 17.0; 07b8f441ca711f9812fad9e9115bab3c3aa92f79 |
Showing 3