CVE-2026-84790

A flaw was found in OpenVPN. This vulnerability allows a remote authenticated attacker to impersonate other users by submitting a specially crafted certificate subject field during authentication. By assuming the identity of a different user, an attacker can gain unauthorized access to restricted...

SUSE CVE-2026-84790

OpenVPN 2.7alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field...

EUVD-2026-100750

OpenVPN 2.7alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field...

DEBIAN-CVE-2026-84790

OpenVPN 2.7alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field...

CVE-2026-84790

OpenVPN 2.7alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field...

CVE-2026-84790

OpenVPN 2.7alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field...

UBUNTU-CVE-2026-84790

OpenVPN 2.7alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field...

CVE-2026-84790

OpenVPN 2.7alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field...

CVE-2026-84790

OpenVPN 2.7alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field...

CVE-2026-84790

OpenVPN 2.7alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field...

CVE-2026-84790

Versions OpenVPN 2.7_alpha1 through 2.7.7 are vulnerable to a security flaw that allows remote authenticated users to impersonate others . This vulnerability is triggered by providing a crafted certificate subject field . The issue is associated with CWE-290 (Authentication Bypass by Spoofing) an...

PT-2026-113540

Name of the Vulnerable Software and Affected Versions OpenVPN versions 2.7 alpha1 through 2.7.7 Description Remote authenticated users can impersonate other users by utilizing a specially crafted certificate subject field. Recommendations Update OpenVPN to a version later than 2.7.7...

CVE-2026-84790: Authentication Bypass by Spoofing

OpenVPN 2.7alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field...

SUSE CVE-2026-84256

An argument parsing issue in OpenVPN 2.1rc10 through 2.6.22 and 2.7alpha1 through 2.7.7 on Windows allows remote authenticated users to execute arbitrary commands via a crafted certificate subject...

CVE-2026-84256

A flaw was found in OpenVPN on Windows. An argument parsing issue allows remote authenticated users to execute arbitrary commands by providing a specially crafted certificate subject. This vulnerability could lead to a complete compromise of the affected system...

CVE-2026-84256

An argument parsing issue in OpenVPN 2.1rc10 through 2.6.22 and 2.7alpha1 through 2.7.7 on Windows allows remote authenticated users to execute arbitrary commands via a crafted certificate subject...

CVE-2026-84256

An argument parsing issue in OpenVPN 2.1rc10 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows remote authenticated users to execute arbitrary commands via a crafted certificate subject...

CVE-2026-84256

An argument parsing issue in OpenVPN versions 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows remote authenticated users to execute arbitrary commands via a crafted certificate subject. The CVSS 4.0 base score is 7.7 (HIGH) , with network attack vector, low complexity, pres...

CVE-2026-84256

An argument parsing issue in OpenVPN 2.1rc10 through 2.6.22 and 2.7alpha1 through 2.7.7 on Windows allows remote authenticated users to execute arbitrary commands via a crafted certificate subject...

EUVD-2026-72296

An argument parsing issue in OpenVPN 2.1rc10 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows remote authenticated users to execute arbitrary commands via a crafted certificate subject...