CVE-2026-106017
Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions.
Publicación Actualización
PatchFirst · Vulnerabilidades recientes
Vulnerabilidad publicada para openvpn3-client en los últimos 30 días: 1. En el catálogo KEV: 0.
Vulnerabilidades: 2
Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions.
The configuration initialization tool in OpenVPN 3 Linux v20 through v24 on Linux allows a local attacker to use symlinks pointing at an arbitrary directory which will change the ownership and permissions of that destination directory.
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.