openvpn
9 known vulnerabilities affecting openvpn products.
Products
Vulnerabilities by priority
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-9560 | Medium | 0.6% | 7.8 | Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8… | |
| CVE-2026-12996 | Medium | 0.5% | 8.1 | A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 al… | |
| CVE-2026-12932 | Medium | 0.4% | 8.1 | A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through… | |
| CVE-2026-13117 | Medium | 0.4% | 8.1 | An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4… | |
| CVE-2026-11771 | Medium | 0.4% | 7.5 | OpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attacke… | |
| CVE-2026-40215 | Medium | 0.4% | 7.4 | A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 al… | |
| CVE-2026-13379 | Medium | 0.3% | 9.1 | The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remot… | |
| CVE-2026-35058 | Low | 0.5% | 6.5 | Improper validation of packet length during tls-crypt-v2 key extraction in OpenV… | |
| CVE-2026-11604 | Low | 0.3% | 6.5 | An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-… |