[ Vendor · 4 CVEs ]
The Libreswan Project
CVEs affecting The Libreswan Project published in the last 30 days, plus any The Libreswan Project CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-94453 | 13 Oct 2026 | CVSS 7.5 | The Libreswan Project libreswanLibreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the connection and another packet… | |
| CVE-2026-77207 | 13 Oct 2026 | CVSS 7.5 | The Libreswan Project libreswanLibreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT… | |
| CVE-2026-77205 | 13 Oct 2026 | CVSS 3.7 | The Libreswan Project libreswanLibreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from the NSS cache. As a result… | |
| CVE-2026-77206 | 13 Oct 2026 | CVSS 7.5 | The Libreswan Project libreswanLibreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within… |