EUVD-2026-62339

After dispatching a decrypt operation to OCF and receiving the result, the wg4 driver failed to check whether the MAC verification step succeeded. The driver thus silently accepted packets with an invalid Poly1305 authentication tag. A remote attacker who can send UDP packets to a WireGuard...

CVE-2026-58085

The wg(4) driver in FreeBSD contains a flaw where it fails to verify the success of the MAC verification step after dispatching a decrypt operation to the OpenCrypto framework (OCF) . This allows the driver to silently accept packets with an invalid Poly1305 authentication tag. A remote attacker ...

CVE-2026-58085: Improper Verification of Cryptographic Signature

After dispatching a decrypt operation to OCF and receiving the result, the wg4 driver failed to check whether the MAC verification step succeeded. The driver thus silently accepted packets with an invalid Poly1305 authentication tag. A remote attacker who can send UDP packets to a WireGuard...

gotatun v0.9.0

GotaTun A userspace WireGuard® implementation, and a fork of BoringTun. License All source code in this repository is subject to the terms of the Mozilla Public License, version 2.0 unless stated otherwise. A copy of this license can be found in the file "LICENSE" or at...

super v1.2.5

📡 SPR: Open Source, secure, user friendly and fast wifi routers for your home. Overview Create an adaptive, micro-segmented network for managing WiFi devices, remote VPN access, and wired systems. One Password Per WiFi Device Policy Based / Zero Trust Network Access Per-Device DNS Rules & Ad Bloc...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100180)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100180 advisory. In the Linux kernel, the following vulnerability has been resolved: wireguard: receive: annotate data-race around receivingcounter.counter Syzkaller with KCSAN...

GO-2022-0969 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, grpcurl, terraform-provider-sendgrid-fips, kubeflow, wireguard-go, dynamic-localpv-provisioner, hey, kubeflow-fips, k3d, terraform-provider-sendgrid, kube-state-metrics, dynamic-localpv-provisioner-fips...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, pulumi-kubernetes-operator, prometheus-adapter, hey, bank-vaults, prometheus-bind-exporter, flux-notification-controller, kots, vertical-pod-autoscaler, secrets-store-csi-driver, nodetaint, buildkitd, trust-manager, gitness,...

GO-2023-1571 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, kubeflow-katib, grpcurl, kubeflow, wireguard-go, restic, k3d, gke-gcloud-auth-plugin, hey, go, terraform-provider-sendgrid...

GO-2022-0969 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, kubeflow-katib, grpcurl, kubeflow, wireguard-go, k3d, hey, terraform-provider-sendgrid...

PT-2026-73234

Name of the Vulnerable Software and Affected Versions pfSense Plus versions prior to 26.07 Description The wg4 driver fails to verify if the MAC verification step succeeded after receiving a decryption result from OCF. This allows the driver to silently accept packets containing an invalid Poly13...

Linux drivers net wireguard device DoS

The vulnerability in the drivers/net/wireguard/device.c component of the Linux kernel lies in insufficient checks on the status of shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2026-72603: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability in wg-easy 15.3.0 allows users with the clients.create permission to execute arbitrary commands as root by injecting newline-delimited WireGuard PostUp directives into the client name field. The client name is written to the WireGuard configuration file witho...

firezone gui-client-1.5.16

Secure remote access that's 3x faster than OpenVPN with zero-trust, peer-to-peer connections Docs | Quickstart | Download Clients | Discussions | Support Overview Firezone is an open source platform to securely manage remote access for any-sized organization. Unlike most VPNs, Firezone takes a...

CVE-2026-19380

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and...

CVE-2026-19380 Mullvad wireguard.sys IOCTL AdapterState reference count

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and...

EUVD-2026-54975

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and...

CVE-2026-19380

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and...

CVE-2026-19380

The CVE-2026-19380 affects Mullvad wireguard.sys 0.10.1, specifically the AdapterState function within the IOCTL Handler. The vulnerability is described as a manipulation that leads to an improper update of the reference count, requiring local access to exploit. Public exploitation material is no...

tailscale v1.102.2

Tailscale https://tailscale.com Private WireGuard® networks made easy Overview This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs on Linux, Windows, macOS, and to varying degrees ...