https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:52:58 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1021 certfr-2026-avi-1021 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1021 https://cve.radiocsirt.org/vuln/euvd-2026-327546 EUVD-2026-327546 https://cve.radiocsirt.org/vuln/euvd-2026-327546 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40215 <p>A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during TLS session promotion.</p> <p>A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during TLS session promotion.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-40215 https://cve.radiocsirt.org/vuln/ghsa-3mmv-h5fc-pvwj <p>A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during TLS session promotion.</p> <p>A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during TLS session promotion.</p> https://cve.radiocsirt.org/vuln/ghsa-3mmv-h5fc-pvwj https://cve.radiocsirt.org/vuln/oesa-2026-2623 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: openvpn</p> <p>OpenVPN is a full-featured open source SSL VPN solution that accommodates a wide range of configurations, including remote access, site-to-site VPNs, Wi-Fi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls. Starting with the fundamental premise that complexity is the enemy of security, OpenVPN offers a cost-effective, lightweight alternative to other VPN technologies that is well-adapted for the SME and enterprise markets. Security Fix(es):</p> <p>Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows authenticated attackers to trigger a fatal assertion and cause a denial of service via a specially crafted packet.(CVE-2026-35058)</p> <p>A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during TLS session promotion.(CVE-2026-40215)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: openvpn</p> <p>OpenVPN is a full-featured open source SSL VPN solution that accommodates a wide range of configurations, including remote access, site-to-site VPNs, Wi-Fi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls. Starting with the fundamental premise that complexity is the enemy of security, OpenVPN offers a cost-effective, lightweight alternative to other VPN technologies that is well-adapted for the SME and enterprise markets. Security Fix(es):</p> <p>Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows authenticated attackers to trigger a fatal assertion and cause a denial of service via a specially crafted packet.(CVE-2026-35058)</p> <p>A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during TLS session promotion.(CVE-2026-40215)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2623 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-40215 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: openvpn, Ubuntu:Pro:16.04:LTS: openvpn, Ubuntu:Pro:18.04:LTS: openvpn, Ubuntu:20.04:LTS: openvpn, Ubuntu:22.04:LTS: openvpn, Ubuntu:24.04:LTS: openvpn, Ubuntu:25.10: openvpn, Ubuntu:26.04:LTS: openvpn</p> <p>A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during TLS session promotion.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: openvpn, Ubuntu:Pro:16.04:LTS: openvpn, Ubuntu:Pro:18.04:LTS: openvpn, Ubuntu:20.04:LTS: openvpn, Ubuntu:22.04:LTS: openvpn, Ubuntu:24.04:LTS: openvpn, Ubuntu:25.10: openvpn, Ubuntu:26.04:LTS: openvpn</p> <p>A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during TLS session promotion.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-40215 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1264 <p>Ein Angreifer kann mehrere Schwachstellen in OpenVPN ausnutzen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in OpenVPN ausnutzen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1264