{"items":[{"id":"CVE-2026-115402","published":"2026-10-28T15:00:23.951Z","updated":"2026-11-06T18:33:10.805Z","title":"OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) via a race condition in the TCP connect…","severity":"MEDIUM","score":5.7,"vendor":"OpenVPN","product":"ovpn-dco-win","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2026-106017","published":"2026-10-22T09:18:01.956Z","updated":"2026-10-22T13:37:47.238Z","title":"Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions.","severity":"MEDIUM","score":6.3,"vendor":"OpenVPN","product":"OpenVPN 3 Core Library","kev":false,"epss":0.002,"kevAdded":null},{"id":"CVE-2026-84471","published":"2026-10-14T14:29:04.851Z","updated":"2026-10-16T15:31:52.556Z","title":"The fix for CVE-2026-12996 was incomplete. A use-after-free in OpenVPN 2.6.0 through 2.6.22 and 2.7_alpha1 through 2.7.7 allows remote authenticated peers to…","severity":"HIGH","score":7.2,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00408,"kevAdded":null},{"id":"CVE-2026-105390","published":"2026-10-13T22:44:38.433Z","updated":"2026-10-14T18:08:12.000Z","title":"Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a…","severity":"MEDIUM","score":6.9,"vendor":"OpenVPN","product":"ovpn-dco-win","kev":false,"epss":0.00113,"kevAdded":null},{"id":"CVE-2026-88964","published":"2026-10-13T22:15:08.905Z","updated":"2026-10-14T18:09:15.335Z","title":"An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or…","severity":"HIGH","score":7.1,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00378,"kevAdded":null},{"id":"CVE-2026-84790","published":"2026-10-13T21:39:05.221Z","updated":"2026-10-18T13:54:09.591Z","title":"OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field","severity":"HIGH","score":7.6,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00146,"kevAdded":null},{"id":"CVE-2026-82325","published":"2026-09-07T11:03:14.851Z","updated":"2026-09-08T15:08:33.677Z","title":"A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via…","severity":"MEDIUM","score":6.8,"vendor":"OpenVPN","product":"ovpn-dco-win","kev":false,"epss":0.00142,"kevAdded":null},{"id":"CVE-2026-84732","published":"2026-09-07T08:16:40.537Z","updated":"2026-09-08T15:01:45.505Z","title":"Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs…","severity":"HIGH","score":8.7,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00342,"kevAdded":null},{"id":"CVE-2026-84256","published":"2026-09-07T07:55:27.465Z","updated":"2026-10-13T22:25:00.499Z","title":"An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.7 on Windows allows remote authenticated users to execute arbitrary…","severity":"HIGH","score":7.7,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00383,"kevAdded":null},{"id":"CVE-2026-84226","published":"2026-09-07T07:47:04.345Z","updated":"2026-09-08T14:59:53.551Z","title":"OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during…","severity":"HIGH","score":8.5,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00142,"kevAdded":null},{"id":"CVE-2026-82312","published":"2026-09-07T07:40:14.456Z","updated":"2026-09-08T14:59:05.003Z","title":"OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC…","severity":"LOW","score":1.8,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00101,"kevAdded":null},{"id":"CVE-2026-81830","published":"2026-09-07T07:36:19.096Z","updated":"2026-09-08T14:56:14.402Z","title":"The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via…","severity":"MEDIUM","score":5.6,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00151,"kevAdded":null},{"id":"CVE-2026-81738","published":"2026-09-07T07:32:20.430Z","updated":"2026-09-08T14:55:10.107Z","title":"OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries","severity":"LOW","score":2.3,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00331,"kevAdded":null},{"id":"CVE-2026-78221","published":"2026-09-07T07:28:14.135Z","updated":"2026-09-08T14:54:43.480Z","title":"An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to cause memory…","severity":"MEDIUM","score":5.9,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2026-78043","published":"2026-09-07T07:21:20.770Z","updated":"2026-09-08T14:54:21.159Z","title":"The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint…","severity":"MEDIUM","score":5.6,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00171,"kevAdded":null},{"id":"CVE-2026-63650","published":"2026-08-14T22:13:26.656Z","updated":"2026-08-17T15:38:23.494Z","title":"OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup…","severity":"LOW","score":2,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00228,"kevAdded":null},{"id":"CVE-2026-63649","published":"2026-08-14T22:13:21.590Z","updated":"2026-08-17T15:38:37.331Z","title":"The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7_alpha1 through 2.7.5 allows local authenticated users to bypass the trusted…","severity":"MEDIUM","score":4.1,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00327,"kevAdded":null},{"id":"CVE-2026-12932","published":"2026-07-30T16:42:03.164Z","updated":"2026-09-17T18:35:35.770Z","title":"A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial…","severity":"HIGH","score":7.1,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00417,"kevAdded":null},{"id":"CVE-2026-12996","published":"2026-07-30T16:38:58.925Z","updated":"2026-07-30T18:07:17.597Z","title":"A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or…","severity":"MEDIUM","score":6,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00461,"kevAdded":null},{"id":"CVE-2026-11771","published":"2026-07-30T16:36:41.087Z","updated":"2026-07-30T18:04:42.335Z","title":"OpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attackers via an off-by-one buffer write in the NTLM proxy authentication to…","severity":"HIGH","score":7,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00375,"kevAdded":null},{"id":"CVE-2026-13117","published":"2026-07-30T16:32:42.271Z","updated":"2026-09-17T18:36:22.675Z","title":"An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-free during TLS…","severity":"MEDIUM","score":6,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00398,"kevAdded":null},{"id":"CVE-2026-13379","published":"2026-07-30T16:28:19.012Z","updated":"2026-07-30T18:09:24.328Z","title":"The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a…","severity":"MEDIUM","score":5.1,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00339,"kevAdded":null},{"id":"CVE-2025-3110","published":"2026-07-08T16:19:38.337Z","updated":"2026-07-08T16:30:47.077Z","title":"OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request…","severity":"MEDIUM","score":6.9,"vendor":"OpenVPN","product":"Access Server","kev":false,"epss":0.00445,"kevAdded":null},{"id":"CVE-2026-13122","published":"2026-07-06T14:32:29.371Z","updated":"2026-07-06T15:51:50.731Z","title":"OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service via a malformed authentication token…","severity":"MEDIUM","score":5.9,"vendor":"Openvpn","product":"OpenVPN","kev":false,"epss":0.00458,"kevAdded":null},{"id":"CVE-2026-13698","published":"2026-07-06T14:13:49.479Z","updated":"2026-07-06T15:28:16.081Z","title":"A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers with a valid tls-crypt-v2…","severity":"MEDIUM","score":6,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00549,"kevAdded":null},{"id":"CVE-2026-11604","published":"2026-06-10T21:04:37.141Z","updated":"2026-06-11T13:27:17.336Z","title":"An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authenticated peer to…","severity":"MEDIUM","score":5.6,"vendor":"OpenVPN","product":"ovpn-dco-win","kev":false,"epss":0.00338,"kevAdded":null},{"id":"CVE-2026-40215","published":"2026-06-08T19:59:20.481Z","updated":"2026-06-16T12:24:37.681Z","title":"A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory…","severity":"MEDIUM","score":6.1,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00372,"kevAdded":null},{"id":"CVE-2026-35058","published":"2026-06-08T19:29:56.309Z","updated":"2026-06-08T19:49:17.361Z","title":"Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows authenticated…","severity":"MEDIUM","score":6.9,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00541,"kevAdded":null},{"id":"CVE-2026-9560","published":"2026-05-26T17:39:57.378Z","updated":"2026-05-27T03:55:51.240Z","title":"Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated…","severity":"CRITICAL","score":9.4,"vendor":"OpenVPN Inc","product":"OpenVPN Connect","kev":false,"epss":0.00574,"kevAdded":null},{"id":"CVE-2026-2738","published":"2026-02-19T20:00:30.951Z","updated":"2026-02-20T20:00:31.699Z","title":"Buffer overflow in ovpn‑dco‑win version 2.8.0 allows local attackers to cause a system crash by sending too large packets to the remote peer when the AEAD tag…","severity":"MEDIUM","score":5.6,"vendor":"OpenVPN","product":"ovpn-dco-win","kev":false,"epss":0.00134,"kevAdded":null},{"id":"CVE-2025-15497","published":"2026-01-30T18:06:07.499Z","updated":"2026-01-30T19:29:24.934Z","title":"Insufficient epoch key slot processing in OpenVPN 2.7_alpha1 through 2.7_rc5 allows remote authenticated users to trigger an assert resulting in a denial of…","severity":"LOW","score":3.8,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00358,"kevAdded":null},{"id":"CVE-2025-13086","published":"2025-12-03T19:54:10.737Z","updated":"2025-12-12T13:50:46.678Z","title":"Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a…","severity":"MEDIUM","score":4.6,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00665,"kevAdded":null},{"id":"CVE-2025-13751","published":"2025-12-03T16:22:35.771Z","updated":"2025-12-12T13:56:20.684Z","title":"Interactive service agent in OpenVPN version 2.5.0 through 2.6.16 and 2.7_alpha1 through 2.7_rc2 on Windows allows a local authenticated user to connect to the…","severity":"LOW","score":1.3,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00177,"kevAdded":null},{"id":"CVE-2025-12106","published":"2025-12-01T12:43:02.480Z","updated":"2025-12-01T18:50:28.995Z","title":"Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses","severity":"CRITICAL","score":9.1,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00577,"kevAdded":null},{"id":"CVE-2025-50055","published":"2025-10-27T13:39:43.652Z","updated":"2025-10-30T18:23:58.634Z","title":"Cross-site scripting (XSS) vulnerability in the SAML Authentication module in OpenVPN Access Server version 2.14.0 through 2.14.3 allows configured remote SAML…","severity":"MEDIUM","score":6.4,"vendor":"OpenVPN","product":"Access Server","kev":false,"epss":0.00214,"kevAdded":null},{"id":"CVE-2025-10680","published":"2025-10-24T10:06:51.056Z","updated":"2026-02-26T16:57:07.973Z","title":"OpenVPN 2.7_alpha1 through 2.7_beta1 on POSIX based platforms allows a remote authenticated server to inject shell commands via DNS variables when --dns-updown…","severity":"HIGH","score":8.8,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.07652,"kevAdded":null},{"id":"CVE-2025-50054","published":"2025-06-20T06:29:01.936Z","updated":"2025-06-23T15:48:43.804Z","title":"Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too large control message…","severity":"MEDIUM","score":5.5,"vendor":"OpenVPN","product":"ovpn-dco-win","kev":false,"epss":0.00246,"kevAdded":null},{"id":"CVE-2025-3908","published":"2025-05-19T14:59:08.482Z","updated":"2025-05-20T18:04:08.335Z","title":"The configuration initialization tool in OpenVPN 3 Linux v20 through v24 on Linux allows a local attacker to use symlinks pointing at an arbitrary directory…","severity":"MEDIUM","score":6.2,"vendor":"OpenVPN","product":"OpenVPN 3 Linux","kev":false,"epss":0.00217,"kevAdded":null},{"id":"CVE-2024-4877","published":"2025-04-03T15:11:51.057Z","updated":"2025-04-04T13:25:17.430Z","title":"OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would…","severity":"HIGH","score":8.8,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00442,"kevAdded":null},{"id":"CVE-2025-2704","published":"2025-04-02T21:00:58.582Z","updated":"2025-10-23T10:53:34.373Z","title":"OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting and replaying…","severity":"HIGH","score":7.5,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00843,"kevAdded":null},{"id":"CVE-2024-13454","published":"2025-01-20T21:07:50.103Z","updated":"2025-01-21T20:01:41.880Z","title":"Weak encryption algorithm in Easy-RSA version 3.0.5 through 3.1.7 allows a local attacker to more easily bruteforce the private CA key when created using…","severity":"MEDIUM","score":5.3,"vendor":"OpenVPN","product":"Easy-RSA","kev":false,"epss":0.00083,"kevAdded":null},{"id":"CVE-2024-5198","published":"2025-01-15T12:57:25.205Z","updated":"2025-01-15T14:49:09.099Z","title":"OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivileged local attacker to send I/O control messages with invalid data to the driver resulting in a…","severity":"LOW","score":3.3,"vendor":"OpenVPN","product":"ovpn-dco","kev":false,"epss":0.0014,"kevAdded":null},{"id":"CVE-2024-8474","published":"2025-01-06T14:33:26.129Z","updated":"2025-01-06T16:54:38.487Z","title":"OpenVPN Connect before version 3.5.0 can contain the configuration profile's clear-text private key which is logged in the application log, which an…","severity":"HIGH","score":7.5,"vendor":"OpenVPN","product":"OpenVPN Connect","kev":false,"epss":0.00534,"kevAdded":null},{"id":"CVE-2024-5594","published":"2025-01-06T13:52:20.272Z","updated":"2025-11-03T20:48:53.705Z","title":"OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker controlling the server can use to inject unexpected arbitrary data ending…","severity":"CRITICAL","score":9.1,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00817,"kevAdded":null},{"id":"CVE-2024-28882","published":"2024-07-08T21:30:24.798Z","updated":"2024-11-01T20:38:32.966Z","title":"OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing…","severity":"MEDIUM","score":4.3,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00665,"kevAdded":null},{"id":"CVE-2024-1305","published":"2024-07-08T17:27:44.097Z","updated":"2024-08-23T03:55:36.778Z","title":"tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overflow memory…","severity":"CRITICAL","score":9.8,"vendor":"OpenVPN","product":"tap-windows6","kev":false,"epss":0.15379,"kevAdded":null},{"id":"CVE-2024-27903","published":"2024-07-08T10:27:40.125Z","updated":"2026-11-03T23:55:36.993Z","title":"OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can…","severity":"HIGH","score":7.2,"vendor":"OpenVPN","product":"OpenVPN 2","kev":false,"epss":0.08922,"kevAdded":null},{"id":"CVE-2024-24974","published":"2024-07-08T10:20:34.520Z","updated":"2026-11-03T21:52:33.565Z","title":"The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with…","severity":"HIGH","score":7.5,"vendor":"OpenVPN","product":"OpenVPN 2","kev":false,"epss":0.09759,"kevAdded":null},{"id":"CVE-2024-27459","published":"2024-07-08T10:14:06.208Z","updated":"2024-08-23T15:05:42.997Z","title":"The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with…","severity":"HIGH","score":7.2,"vendor":"OpenVPN","product":"OpenVPN GUI","kev":false,"epss":0.0826,"kevAdded":null},{"id":"CVE-2023-7235","published":"2024-02-21T10:55:15.487Z","updated":"2024-08-26T16:13:36.611Z","title":"The OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions to the installation directory of OpenVPN binaries when using…","severity":"HIGH","score":8.4,"vendor":"OpenVPN","product":"OpenVPN","kev":false,"epss":0.00214,"kevAdded":null},{"id":"CVE-2023-6247","published":"2024-02-20T18:43:17.890Z","updated":"2024-10-28T00:05:34.713Z","title":"The PKCS#7 parser in OpenVPN 3 Core Library versions through 3.8.3 did not properly validate the parsed data, which would result in the application crashing.","severity":"MEDIUM","score":6.5,"vendor":"OpenVPN","product":"OpenVPN 3 Core Library","kev":false,"epss":0.00778,"kevAdded":null},{"id":"CVE-2023-7245","published":"2024-02-20T11:08:29.089Z","updated":"2024-08-14T14:36:15.335Z","title":"The nodejs framework in OpenVPN Connect 3.0 through 3.4.3 (Windows)/3.4.7 (macOS) was not properly configured, which allows a local user to execute arbitrary…","severity":"HIGH","score":7.8,"vendor":"OpenVPN","product":"OpenVPN Connect","kev":false,"epss":0.00316,"kevAdded":null},{"id":"CVE-2023-7224","published":"2024-01-08T13:55:20.160Z","updated":"2024-09-04T19:13:07.440Z","title":"OpenVPN Connect version 3.0 through 3.4.6 on macOS allows local users to execute code in external third party libraries using the DYLD_INSERT_LIBRARIES…","severity":"HIGH","score":7.8,"vendor":"OpenVPN","product":"OpenVPN Connect","kev":false,"epss":0.00239,"kevAdded":null},{"id":"CVE-2023-46850","published":"2023-11-11T00:15:07.076Z","updated":"2026-06-23T21:24:00.414Z","title":"Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a…","severity":"CRITICAL","score":9.8,"vendor":"OpenVPN","product":"OpenVPN 2 (Community)","kev":false,"epss":0.01999,"kevAdded":null},{"id":"CVE-2023-46849","published":"2023-11-11T00:05:13.487Z","updated":"2025-06-11T14:30:02.796Z","title":"Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows an attacker to trigger a divide by zero behaviour which could…","severity":"HIGH","score":7.5,"vendor":"OpenVPN","product":"OpenVPN 2 (Community)","kev":false,"epss":0.01141,"kevAdded":null},{"id":"CVE-2022-3761","published":"2023-10-17T12:10:36.100Z","updated":"2024-08-03T01:20:57.580Z","title":"OpenVPN Connect versions before 3.4.0.4506 (macOS) and OpenVPN Connect before 3.4.0.3100 (Windows) allows man-in-the-middle attackers to intercept…","severity":"MEDIUM","score":5.9,"vendor":"OpenVPN Inc","product":"OpenVPN Connect","kev":false,"epss":0.00842,"kevAdded":null},{"id":"CVE-2021-4234","published":"2022-07-06T19:10:17.000Z","updated":"2024-08-03T17:23:09.056Z","title":"OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the…","severity":"HIGH","score":7.5,"vendor":null,"product":"OpenVPN Access Server","kev":false,"epss":0.00916,"kevAdded":null},{"id":"CVE-2022-33738","published":"2022-07-06T15:10:33.000Z","updated":"2024-08-03T08:09:22.611Z","title":"OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal","severity":"HIGH","score":7.5,"vendor":null,"product":"OpenVPN Access Server","kev":false,"epss":0.0094,"kevAdded":null},{"id":"CVE-2022-33737","published":"2022-07-06T15:09:08.000Z","updated":"2024-08-03T08:09:22.660Z","title":"The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin…","severity":"HIGH","score":7.5,"vendor":null,"product":"OpenVPN Access Server","kev":false,"epss":0.0089,"kevAdded":null},{"id":"CVE-2022-0547","published":"2022-03-18T18:00:20.000Z","updated":"2025-11-03T20:34:30.191Z","title":"OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"OpenVPN","kev":false,"epss":0.03478,"kevAdded":null},{"id":"CVE-2021-3824","published":"2021-09-23T14:53:51.000Z","updated":"2024-08-03T17:09:09.578Z","title":"OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web login page URL.","severity":"MEDIUM","score":6.1,"vendor":null,"product":"OpenVPN Access Server","kev":false,"epss":0.00746,"kevAdded":null},{"id":"CVE-2021-3547","published":"2021-07-12T10:35:52.000Z","updated":"2024-08-03T17:01:06.568Z","title":"OpenVPN 3 Core Library version 3.6 and 3.6.1 allows a man-in-the-middle attacker to bypass the certificate authentication by issuing an unrelated server…","severity":"HIGH","score":7.4,"vendor":null,"product":"OpenVPN 3 Core Library","kev":false,"epss":0.01238,"kevAdded":null},{"id":"CVE-2021-3613","published":"2021-07-02T12:33:36.000Z","updated":"2024-08-03T17:01:07.446Z","title":"OpenVPN Connect 3.2.0 through 3.3.0 allows local users to load arbitrary dynamic loadable libraries via an OpenSSL configuration file if present, which allows…","severity":"HIGH","score":7.8,"vendor":null,"product":"OpenVPN Connect","kev":false,"epss":0.00742,"kevAdded":null},{"id":"CVE-2021-3606","published":"2021-07-02T12:30:38.000Z","updated":"2024-08-03T17:01:07.343Z","title":"OpenVPN before version 2.5.3 on Windows allows local users to load arbitrary dynamic loadable libraries via an OpenSSL configuration file if present, which…","severity":"HIGH","score":7.8,"vendor":null,"product":"OpenVPN-GUI","kev":false,"epss":0.00344,"kevAdded":null},{"id":"CVE-2020-36382","published":"2021-06-04T10:47:15.000Z","updated":"2024-08-04T17:23:10.453Z","title":"OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase via incorrect authentication token data…","severity":"HIGH","score":7.5,"vendor":null,"product":"OpenVPN Access Server","kev":false,"epss":0.01891,"kevAdded":null},{"id":"CVE-2020-15077","published":"2021-06-04T10:42:01.000Z","updated":"2024-08-04T13:08:21.878Z","title":"OpenVPN Access Server 2.8.7 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with…","severity":"MEDIUM","score":5.3,"vendor":null,"product":"OpenVPN Access Server","kev":false,"epss":0.01215,"kevAdded":null},{"id":"CVE-2020-15076","published":"2021-05-26T18:17:57.000Z","updated":"2024-08-04T13:08:21.820Z","title":"Private Tunnel installer for macOS version 3.0.1 and older versions may corrupt system critical files it should not have access via symlinks in /tmp.","severity":"HIGH","score":7.8,"vendor":null,"product":"Private Tunnel","kev":false,"epss":0.00358,"kevAdded":null},{"id":"CVE-2020-15078","published":"2021-04-26T13:19:45.000Z","updated":"2024-08-04T13:08:21.675Z","title":"OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred…","severity":"HIGH","score":7.5,"vendor":null,"product":"OpenVPN","kev":false,"epss":0.04948,"kevAdded":null},{"id":"CVE-2020-15075","published":"2021-03-30T13:38:02.000Z","updated":"2024-08-04T13:08:21.419Z","title":"OpenVPN Connect installer for macOS version 3.2.6 and older may corrupt system critical files it should not have access via symlinks in /tmp.","severity":"HIGH","score":7.1,"vendor":null,"product":"OpenVPN Connect","kev":false,"epss":0.00299,"kevAdded":null},{"id":"CVE-2020-15074","published":"2020-07-14T17:27:31.000Z","updated":"2024-08-04T13:08:21.889Z","title":"OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making…","severity":"HIGH","score":7.5,"vendor":null,"product":"OpenVPN Access Server","kev":false,"epss":0.01045,"kevAdded":null}]}