Openvpn - vulnerabilities (CVEs)

100 CVEs in 20 products, 6 in the last 30 days, newest from 2026-10-28.

Products

• Openvpn - 51 CVEs
• Openvpn Access Server - 21 CVEs
• Connect - 8 CVEs
• Ovpn-dco-win - 6 CVEs
• Access Server - 3 CVEs
• Openvpn Connect - 3 CVEs
• Openvpn Gui - 3 CVEs
• Openvpn-gui - 2 CVEs
• Openvpn 2 - 2 CVEs
• Openvpn 2 Community - 2 CVEs
• Openvpn 3 Core Library - 2 CVEs
• Easy-rsa - 1 CVEs
• Openvpn2 - 1 CVEs
• Openvpn3linux - 1 CVEs
• Openvpn 3 - 1 CVEs
• Openvpn 3 Linux - 1 CVEs
• Ovpn-dco - 1 CVEs
• Private Tunnel - 1 CVEs
• Tap-windows6 - 1 CVEs
• Tap Windows6 - 1 CVEs

Newest CVEs of Openvpn

• CVE-2026-115402 - CVSS 5.7 (medium), 2026-10-28: OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) via a race condition in the TCP connect…
• CVE-2026-106017 - CVSS 6.3 (medium), 2026-10-22: Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions.
• CVE-2026-84471 - CVSS 7.2 (high), 2026-10-14: The fix for CVE-2026-12996 was incomplete. A use-after-free in OpenVPN 2.6.0 through 2.6.22 and 2.7_alpha1 through 2.7.7 allows remote authenticated peers to…
• CVE-2026-105390 - CVSS 6.9 (medium), 2026-10-13: Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a…
• CVE-2026-88964 - CVSS 7.1 (high), 2026-10-13: An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or…
• CVE-2026-84790 - CVSS 7.6 (high), 2026-10-13: OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field
• CVE-2026-82325 - CVSS 6.8 (medium), 2026-09-07: A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via…
• CVE-2026-84732 - CVSS 8.7 (high), 2026-09-07: Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs…
• CVE-2026-84256 - CVSS 7.7 (high), 2026-09-07: An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.7 on Windows allows remote authenticated users to execute arbitrary…
• CVE-2026-84226 - CVSS 8.5 (high), 2026-09-07: OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during…
• CVE-2026-82312 - CVSS 1.8 (low), 2026-09-07: OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named…
• CVE-2026-81830 - CVSS 5.6 (medium), 2026-09-07: The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via…
• CVE-2026-81738 - CVSS 2.3 (low), 2026-09-07: OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries
• CVE-2026-78221 - CVSS 5.9 (medium), 2026-09-07: An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to cause memory…
• CVE-2026-78043 - CVSS 5.6 (medium), 2026-09-07: The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint…
• CVE-2026-63650 - CVSS 2 (low), 2026-08-14: OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup…
• CVE-2026-63649 - CVSS 4.1 (medium), 2026-08-14: The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7_alpha1 through 2.7.5 allows local authenticated users to bypass the trusted…
• CVE-2026-12932 - CVSS 8.1 (high), 2026-07-30: A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial…
• CVE-2026-12996 - CVSS 8.1 (high), 2026-07-30: A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or…
• CVE-2026-11771 - CVSS 7.5 (high), 2026-07-30: OpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attackers via an off-by-one buffer write in the NTLM proxy authentication to…
• CVE-2026-13117 - CVSS 8.1 (high), 2026-07-30: An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-free during TLS…
• CVE-2026-13379 - CVSS 9.1 (critical), 2026-07-30: The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a…
• CVE-2025-3110 - CVSS 7.5 (high), 2026-07-08: OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request…
• CVE-2026-13122 - CVSS 5.9 (medium), 2026-07-06: OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service via a malformed authentication token…
• CVE-2026-13698 - CVSS 7.5 (high), 2026-07-06: A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers with a valid tls-crypt-v2…
• CVE-2026-11604 - CVSS 6.5 (medium), 2026-06-10: An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authenticated peer to…
• CVE-2026-40215 - CVSS 7.4 (high), 2026-06-08: A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory…
• CVE-2026-35058 - CVSS 6.9 (medium), 2026-06-08: Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows authenticated…
• CVE-2026-9560 - CVSS 9.4 (critical), 2026-05-26: Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated…
• CVE-2026-2738 - CVSS 5.6 (medium), 2026-02-19: Buffer overflow in ovpn‑dco‑win version 2.8.0 allows local attackers to cause a system crash by sending too large packets to the remote peer when the AEAD tag…