https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T02:20:27.371650+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-02400 bdu:2026-02400 2026-10-09T02:20:27.383298+00:00 bdu:2026-02400 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0931 certfr-2025-avi-0931 — Une vulnérabilité a été découverte dans StrongSwan. Elle permet à un attaquant de provoquer une exécution de code arbit… 2026-10-09T02:20:27.383335+00:00 certfr-2025-avi-0931 https://cve.radiocsirt.org/vuln/euvd-2026-265962 EUVD-2026-265962 2026-10-09T02:20:27.383354+00:00 EUVD-2026-265962 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62291 fkie_cve-2025-62291 2026-10-09T02:20:27.383365+00:00

In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.

 https://cve.radiocsirt.org/vuln/ghsa-p527-wjvq-vxg8 GHSA-p527-wjvq-vxg8 2026-10-09T02:20:27.383393+00:00

In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-62291 msrc_CVE-2025-62291 — In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted… 2026-10-09T02:20:27.383409+00:00 msrc_CVE-2025-62291 https://cve.radiocsirt.org/vuln/oesa-2026-4070 OESA-2026-4070 — strongswan security update 2026-10-09T02:20:27.383425+00:00

Affected: openEuler:22.03-LTS-SP4: strongswan

The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel. Security Fix(es):

In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.(CVE-2025-62291)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15681-1 openSUSE-SU-2025:15681-1 — strongswan-6.0.3-1.1 on GA media 2026-10-09T02:20:27.383449+00:00

strongswan-6.0.3-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2025:21167-1 SUSE-SU-2025:21167-1 — Security update for strongswan 2026-10-09T02:20:27.383465+00:00

Security update for strongswan

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-62291 UBUNTU-CVE-2025-62291 2026-10-09T02:20:27.383479+00:00

Affected: Ubuntu:Pro:14.04:LTS: strongswan, Ubuntu:Pro:16.04:LTS: strongswan, Ubuntu:Pro:FIPS-updates:16.04:LTS: strongswan, Ubuntu:Pro:FIPS:16.04:LTS: strongswan, Ubuntu:Pro:18.04:LTS: strongswan, Ubuntu:Pro:FIPS-updates:18.04:LTS: strongswan, Ubuntu:Pro:FIPS:18.04:LTS: strongswan, Ubuntu:20.04:LTS: strongswan, Ubuntu:Pro:FIPS-updates:20.04:LTS: strongswan, Ubuntu:Pro:FIPS:20.04:LTS: strongswan and 6 more

In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2427 WID-SEC-W-2025-2427 — strongSwan (eap-mschapv2 plugin): Schwachstelle ermöglicht Codeausführung und DoS 2026-10-09T02:20:27.383525+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in strongSwan ausnutzen, um einen Denial-of-Service-Zustand zu verursachen oder möglicherweise beliebigen Code auszuführen.