CVE-2026-78134

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

CVE-2026-78134

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

CVE-2026-78134

strongSwan versions 4.5.0 through 6.0.7 contain an Incorrect Access Control vulnerability in the eap-ttls and eap-peap plugins caused by missing or mismatched inner EAP identity authentication details. This can result in incorrect identity binding and a potential authorization bypass . The CVSS 3...

EUVD-2026-75920

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

CVE-2026-78134

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

CVE-2026-78134

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

CVE-2026-78126

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

CVE-2026-78126

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

CVE-2026-78126

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

CVE-2026-78126

CVE-2026-78126 affects strongSwan (an IKE/IPsec suite), versions 4.1.10 through 6.0.7 . The vulnerability is a NULL-pointer dereference in the eap-aka plugin triggered when processing an unexpected AKA-Synchronization-Failure message, which can result in a crash (denial of service). The CVSS 3.1 ...

CVE-2026-78126

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

EUVD-2026-75900

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

CVE-2026-78126

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

CVE-2026-78126

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

CVE-2026-78134: Incorrect Authorization

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

CVE-2026-78126: NULL Pointer Dereference

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

SUSE CVE-2026-78126

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

SUSE CVE-2026-78134

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

SUSE-SU-2026:4115-1 Security update for strongswan

This update for strongswan fixes the following issues: - CVE-2026-47895: Double-Free When Destroying Certain Cloned Identities bsc1266360. - CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7...

NewStart CGSL MAIN 7.02 : strongswan Vulnerability (NS-SA-2026-0099)

The remote NewStart CGSL host, running version MAIN 7.02, has strongswan packages installed that are affected by a vulnerability: - In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integ...