CVE-2026-105390

Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive...

CVE-2026-105390

Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive...

DEBIAN-CVE-2026-84790

OpenVPN 2.7alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field...

CVE-2026-84790

OpenVPN 2.7alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field...

CVE-2026-84790

OpenVPN 2.7alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field...

UBUNTU-CVE-2026-84790

OpenVPN 2.7alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field...

CVE-2026-88964

The OpenVPN software versions 2.7_alpha3 through 2.7.7 on Windows and Android platforms are affected by an integer underflow vulnerability. This flaw can be triggered by remote authenticated servers using crafted domain search options , potentially resulting in a denial of service or memory discl...

CVE-2026-88964

An integer underflow in OpenVPN version 2.7alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disclosure via crafted domain search options...

CVE-2026-88964

An integer underflow in OpenVPN version 2.7alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disclosure via crafted domain search options...

CVE-2026-88964

An integer underflow in OpenVPN version 2.7alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disclosure via crafted domain search options...

CVE-2026-84790

Versions OpenVPN 2.7_alpha1 through 2.7.7 are vulnerable to a security flaw that allows remote authenticated users to impersonate others . This vulnerability is triggered by providing a crafted certificate subject field . The issue is associated with CWE-290 (Authentication Bypass by Spoofing) an...

CVE-2026-84790

OpenVPN 2.7alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field...

CVE-2026-84790

OpenVPN 2.7alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field...

CVE-2026-84790

OpenVPN 2.7alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field...

CVE-2026-84790

OpenVPN 2.7alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field...

MGASA-2026-0498 Updated openvpn package fixes security vulnerabilities

Improve on checksessionbufnotused, catch possible double-free in the lame duck case. CVE-2026-84471 Reliability layer: avoid unbounded reliable TLS timeout, and ignore acks for packets that cannot be outstanding. CVE-2026-84732...

Updated openvpn package fixes security vulnerabilities

Improve on checksessionbufnotused, catch possible double-free in the lame duck case. CVE-2026-84471 Reliability layer: avoid unbounded reliable TLS timeout, and ignore acks for packets that cannot be outstanding. CVE-2026-84732...

CVE-2026-84790: Authentication Bypass by Spoofing

OpenVPN 2.7alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field...

PT-2026-113548

Name of the Vulnerable Software and Affected Versions OpenVPN ovpn-dco-win versions 0.6.5 through 1.3.5 OpenVPN ovpn-dco-win versions 2.4.0 through 2.8.7 Description Improper synchronization in the Windows component allows local attackers to trigger a deadlock by performing a crafted write to the...

PT-2026-113540

Name of the Vulnerable Software and Affected Versions OpenVPN versions 2.7 alpha1 through 2.7.7 Description Remote authenticated users can impersonate other users by utilizing a specially crafted certificate subject field. Recommendations Update OpenVPN to a version later than 2.7.7...