PT-2026-89742

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE CHILD SA requests are mishandled, there can be an authentication bypass...