[ Vendor · 5 CVEs ]
OpenVPN
CVEs affecting OpenVPN published in the last 30 days, plus any OpenVPN CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-106017 | 22 Oct 2026 | CVSS 6.3 | OpenVPN 3 Core LibraryImproper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage… | |
| CVE-2026-84471 | 14 Oct 2026 | CVSS 7.2 | OpenVPNThe fix for CVE-2026-12996 was incomplete. A use-after-free in OpenVPN 2.6.0 through 2.6.22 and 2.7_alpha1 through 2.7.7 allows remote authenticated… | |
| CVE-2026-88964 | 13 Oct 2026 | CVSS 7.1 | OpenVPNAn integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of… | |
| CVE-2026-105390 | 13 Oct 2026 | CVSS 6.9 | OpenVPN ovpn-dco-winImproper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to… | |
| CVE-2026-84790 | 13 Oct 2026 | CVSS 7.6 | OpenVPNOpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field |