OA
Product
Openvpn Access Server
by Openvpn · last CVE Jul 8, 2026
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 8Medium 3Low 0
Watch

Add Openvpn Access Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-46850
9.8
2%
Nov 11
Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer
Affected: 2.11.0 through 2.11.3; 2.12.0 before 2.12.2
CVE-2020-8953
9.8
1%
Feb 13
OpenVPN Access Server 2.8.x before 2.8.1 allows LDAP authentication bypass (except when a user is enrolled in two-factor authentication)
Affected: 2.8.0 before 2.8.1
Showing 2