Improper Input Validation

🗓️ 26 Nov 2025 23:48:50Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 2 Views

OpenVPN lacks validation of source addresses in sessions, enabling cross address access and denial of service.

Reporter	Title	Published	Views	Family All 51
FreeBSD	OpenVPN -- HMAC verification on source IP address ineffective	27 Oct 202500:00	–	freebsd
Tenable Nessus	Amazon Linux 2023 : openvpn, openvpn-devel (ALAS2023-2025-1312)	9 Dec 202500:00	–	nessus
Tenable Nessus	Debian dsa-6069 : openvpn - security update	4 Dec 202500:00	–	nessus
Tenable Nessus	FreeBSD : OpenVPN -- HMAC verification on source IP address ineffective (17a40d76-c3fd-11f0-b513-0da7be77c170)	18 Nov 202500:00	–	nessus
Tenable Nessus	openSUSE 16 Security Update : openvpn (openSUSE-SU-2026:20137-1)	4 Feb 202600:00	–	nessus
Tenable Nessus	Slackware Linux 15.0 / current openvpn Vulnerability (SSA:2025-323-01)	19 Nov 202500:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : openvpn (SUSE-SU-2026:0831-1)	6 Mar 202600:00	–	nessus
Tenable Nessus	SUSE SLES16 Security Update : openvpn (SUSE-SU-2026:20196-1)	4 Feb 202600:00	–	nessus
Tenable Nessus	Ubuntu 24.04 LTS / 25.04 / 25.10 : OpenVPN vulnerability (USN-7898-1)	3 Dec 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2025-13086	19 Nov 202500:00	–	nessus

Vulners

Node

openvpn openvpnMatch2.6.6-r0os

AND

openvpn openvpnMatch2.6.8-r0os

AND

openvpn openvpnMatch2.6.7-r0os

AND

openvpn openvpnMatch2.6.11-r0os

AND

alpinelinux alpine_linuxMatch3.19

openvpn openvpnMatch2.6.10-r0os

AND

openvpn openvpnMatch2.6.11-r0os

AND

alpinelinux alpine_linuxMatch3.20

openvpn openvpnMatch2.6.14-r0os

AND

openvpn openvpnMatch2.6.12-r1os

AND

alpinelinux alpine_linuxMatch3.21

openvpn openvpnMatch2.5.3-r0os

AND

openvpn openvpnMatch2.4.8-r4os

AND

openvpn openvpnMatch2.6.3-r0os

AND

openvpn openvpnMatch2.6.11-r0os

AND

openvpn openvpnMatch2.5.2-r0os

AND

openvpn openvpnMatch2.5.0-r1os

AND

openvpn openvpnMatch2.6.0-r0os

AND

openvpn openvpnMatch2.6.9-r1os

AND

openvpn openvpnMatch2.6.9-r0os

AND

openvpn openvpnMatch2.6.12-r0os

AND

openvpn openvpnMatch2.5.6-r1os

AND

openvpn openvpnMatch2.5.6-r0os

AND

openvpn openvpnMatch2.6.7-r0os

AND

openvpn openvpnMatch2.5.8-r0os

AND

openvpn openvpnMatch2.5.4-r0os

AND

openvpn openvpnMatch2.5.5-r0os

AND

openvpn openvpnMatch2.6.13-r0os

AND

openvpn openvpnMatch2.6.2-r1os

AND

openvpn openvpnMatch2.5.1-r0os

AND

openvpn openvpnMatch2.4.8-r3os

AND

openvpn openvpnMatch2.6.2-r0os

AND

openvpn openvpnMatch2.6.5-r0os

AND

openvpn openvpnMatch2.6.12-r1os

AND

openvpn openvpnMatch2.6.10-r0os

AND

openvpn openvpnMatch2.6.6-r0os

AND

openvpn openvpnMatch2.5.3-r1os

AND

openvpn openvpnMatch2.5.7-r0os

AND

openvpn openvpnMatch2.6.14-r0os

AND

openvpn openvpnMatch2.4.9-r0os

AND

openvpn openvpnMatch2.6.8-r0os

AND

openvpn openvpnMatch2.6.1-r0os

AND

openvpn openvpnMatch2.6.4-r0os

AND

alpinelinux alpine_linuxMatchedge

openvpn openvpnMatch2.6.14-r0os

AND

alpinelinux alpine_linuxMatch3.22

Source	Link
secdb	www.secdb.alpinelinux.org/v3.21/main.yaml
secdb	www.secdb.alpinelinux.org/v3.20/main.yaml
secdb	www.secdb.alpinelinux.org/v3.19/main.yaml
secdb	www.secdb.alpinelinux.org/edge/main.yaml
secdb	www.secdb.alpinelinux.org/v3.22/main.yaml
mail-archive	www.mail-archive.com/[email protected]/msg00151.html
community	www.community.openvpn.net/Security%20Announcements/CVE-2025-13086
mail-archive	www.mail-archive.com/[email protected]/msg00152.html

30 Jan 2026 19:19Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.5

CVSS 48.2

EPSS0.00052

SSVC