PT-2026-86642

OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries...

CVE-2026-82325: Use After Free

A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages...

CVE-2026-81738: Stack-based Buffer Overflow

OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries...

PT-2026-86645

OpenVPN version 2.5.0 through 2.6.22 and 2.7 alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during network configuration steps...

CVE-2026-78043: Improper Limitation of a Pathname to a Restricted Directory

The Windows Interactive Service in OpenVPN 2.7alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via specially crafted paths...

PT-2026-86639

The Windows Interactive Service in OpenVPN 2.7 alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via specially crafted paths...

CVE-2026-78221: Incorrect Calculation of Buffer Size

An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7alpha1 through 2.7.6 allows local authenticated users to cause memory corruption or disclose sensitive information via crafted NRPT inputs...

CVE-2026-81830: External Control of File Name or Path

The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path validation...

PT-2026-86650

An argument parsing issue in OpenVPN 2.1 rc10 through 2.6.22 and 2.7 alpha1 through 2.7.6 on Windows allows remote authenticated users to execute arbitrary commands via a crafted certificate subject...

PT-2026-86680

A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages...

PT-2026-86643

Name of the Vulnerable Software and Affected Versions OpenVPN versions 2.4.0 through 2.6.22 Description The Windows interactive service contains a flaw in file path validation. This allows local authenticated users to bypass the constraint of the trusted configuration directory. Recommendations...

CVE-2026-84256: Improper Neutralization of Special Elements used in an OS Command

An argument parsing issue in OpenVPN 2.1rc10 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows remote authenticated users to execute arbitrary commands via a crafted certificate subject...

CVE-2026-84226: Untrusted Search Path

OpenVPN version 2.5.0 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during network configuration steps...

PT-2026-86644

OpenVPN 2.0.0 through 2.6.22 and 2.7 alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC objects...

PT-2026-86640

An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7 alpha1 through 2.7.6 allows local authenticated users to cause memory corruption or disclose sensitive information via crafted NRPT inputs...

CVE-2026-84732: Integer Overflow or Wraparound

Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs that trigger a timeout integer overflow...

CVE-2026-82312: Incorrect Permission Assignment for Critical Resource

OpenVPN 2.0.0 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC objects...

openvpn v2.7.7

OpenVPN -- A Secure tunneling daemon Copyright C 2002-2026 OpenVPN Inc. This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License version 2 as published by the Free Software Foundation. To get the latest release of OpenVPN, go to:...

FreeBSD : OpenVPN: denial of service (25012057-a886-11f1-a836-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 25012057-a886-11f1-a836-b42e991fc52e advisory. OpenVPN team reports: OpenVPN 2.x allows attackers to potentially cause a denial of service against the...

Linux Distros Unpatched Vulnerability : CVE-2026-84471

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - openvpn - None Ubuntu Linux - Use-After-Free / Dangling Pointer in TLS Session Handling CVE-2026-84471 Note that Nessus relies on the presence of...