CVE-2026-106017
Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions.
Published Updated
PatchFirst · Latest vulnerabilities
openvpn3-client vulnerabilities
Vulnerability published for openvpn3-client in the last 30 days: 1. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
CVE-2025-3908
The configuration initialization tool in OpenVPN 3 Linux v20 through v24 on Linux allows a local attacker to use symlinks pointing at an arbitrary directory which will change the ownership and permissions of that destination directory.
- Update to 24.1+dfsg-1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.