CVE-2026-81830

The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path validation...

EUVD-2026-72279

The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path validation...

CVE-2026-81830

OpenVPN versions 2.4.0 through 2.6.22 contain a vulnerability in the Windows interactive service caused by incorrect file path validation , allowing local authenticated users to bypass the trusted configuration directory constraint. The impact is primarily a security bypass with high integrity im...

CVE-2026-81830

The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path validation...

CVE-2026-81738

OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries...

CVE-2026-81738

OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries...

EUVD-2026-72278

OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries...

CVE-2026-81738

OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver is vulnerable to an out-of-bounds write triggered by crafted DOMAIN-SEARCH entries. The CVSS 4.0 base score is 2.3 (LOW) , reflecting high attack complexity, a required attack condition, and only low impact to integrity, availab...

EUVD-2026-72276

An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7alpha1 through 2.7.6 allows local authenticated users to cause memory corruption or disclose sensitive information via crafted NRPT inputs...

CVE-2026-78221

An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7alpha1 through 2.7.6 allows local authenticated users to cause memory corruption or disclose sensitive information via crafted NRPT inputs...

CVE-2026-78221

An incorrect buffer size calculation in the Windows Interactive Service component of OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to cause memory corruption or disclose sensitive information by supplying crafted NRPT inputs . The CVSS 4.0 base score is 5.9 (MEDIUM) with a loc...

CVE-2026-78221

An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7alpha1 through 2.7.6 allows local authenticated users to cause memory corruption or disclose sensitive information via crafted NRPT inputs...

CVE-2026-78043

OpenVPN's Windows Interactive Service in versions 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint, enabling them to load arbitrary configuration files via specially crafted paths. The CVSS 4.0 base score is 5.6 (MEDIUM) with a loc...

CVE-2026-78043

The Windows Interactive Service in OpenVPN 2.7alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via specially crafted paths...

EUVD-2026-72275

The Windows Interactive Service in OpenVPN 2.7alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via specially crafted paths...

CVE-2026-78043

The Windows Interactive Service in OpenVPN 2.7alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via specially crafted paths...

CVE-2026-78043: Improper Limitation of a Pathname to a Restricted Directory

The Windows Interactive Service in OpenVPN 2.7alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via specially crafted paths...

PT-2026-86639

The Windows Interactive Service in OpenVPN 2.7 alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via specially crafted paths...

PT-2026-86643

Name of the Vulnerable Software and Affected Versions OpenVPN versions 2.4.0 through 2.6.22 Description The Windows interactive service contains a flaw in file path validation. This allows local authenticated users to bypass the constraint of the trusted configuration directory. Recommendations...

PT-2026-86650

An argument parsing issue in OpenVPN 2.1 rc10 through 2.6.22 and 2.7 alpha1 through 2.7.6 on Windows allows remote authenticated users to execute arbitrary commands via a crafted certificate subject...