Softether - vulnerabilities (CVEs)
16 CVEs in 3 products, 0 in the last 30 days, newest from 2026-04-07.
Products
- Vpn - 14 CVEs
- See.sys - 1 CVEs
- Softethervpn - 1 CVEs
Newest CVEs of Softether
- CVE-2026-39312 - CVSS 7.5 (high), 2026-04-07: SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Program. In 5.2.5188 and earlier, a pre-authentication denial-of-service vulnerability…
- CVE-2025-25565 - CVSS 9.8 (critical), 2025-03-12: SoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in the Command.c file via the PtMakeCert and PtMakeCert2048 functions. NOTE: the Supplier disputes…
- CVE-2025-25568 - CVSS 9.8 (critical), 2025-03-12: SoftEtherVPN 5.02.5187 is vulnerable to Use after Free in the Command.c file via the CheckNetworkAcceptThread function. NOTE: the Supplier disputes this…
- CVE-2025-25567 - CVSS 9.8 (critical), 2025-03-12: SoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in Internat.c via the UniToStrForSingleChars function. NOTE: the Supplier disputes this because the…
- CVE-2025-25566 - CVSS 5.6 (medium), 2025-03-12: Memory Leak vulnerability in SoftEtherVPN 5.02.5187 allows an attacker to cause a denial of service via the UnixMemoryAlloc function. NOTE: the Supplier…
- CVE-2024-38520 - CVSS 5.3 (medium), 2024-06-26: SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Program. When SoftEtherVPN is deployed with L2TP enabled on a device, it introduces the…
- CVE-2023-25774 - CVSS 7.5 (high), 2023-10-12: A denial-of-service vulnerability exists in the vpnserver ConnectionAccept() functionality of SoftEther VPN 5.02. A set of specially crafted network…
- CVE-2023-31192 - CVSS 5.3 (medium), 2023-10-12: An information disclosure vulnerability exists in the ClientConnect() functionality of SoftEther VPN 5.01.9674. A specially crafted network packet can lead to…
- CVE-2023-27516 - CVSS 7.8 (high), 2023-10-12: An authentication bypass vulnerability exists in the CiRpcAccepted() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674. A specially crafted network…
- CVE-2023-32634 - CVSS 7.8 (high), 2023-10-12: An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of SoftEther VPN 5.01.9674 and 4.41-9782-beta. An attacker can perform…
- CVE-2023-27395 - CVSS 9 (critical), 2023-10-12: A heap-based buffer overflow vulnerability exists in the vpnserver WpcParsePacket() functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A…
- CVE-2023-32275 - CVSS 5.5 (medium), 2023-10-12: An information disclosure vulnerability exists in the CtEnumCa() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674. Specially crafted network…
- CVE-2023-23581 - CVSS 7.5 (high), 2023-10-12: A denial-of-service vulnerability exists in the vpnserver EnSafeHttpHeaderValueStr functionality of SoftEther VPN 5.01.9674 and 5.02. A specially crafted…
- CVE-2023-22325 - CVSS 5.9 (medium), 2023-10-12: A denial of service vulnerability exists in the DCRegister DDNS_RPC_MAX_RECV_SIZE functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A…
- CVE-2023-22308 - CVSS 7.5 (high), 2023-10-12: An integer underflow vulnerability exists in the vpnserver OvsProcessData functionality of SoftEther VPN 5.01.9674 and 5.02. A specially crafted network…
- CVE-2019-11868 - CVSS 7.8 (high), 2019-07-29: See.sys, up to version 4.25, in SoftEther VPN Server versions 4.29 or older, allows a user to call an IOCTL specifying any kernel address to which arbitrary…
