OP
Product
OpenVPN
63
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 8High 26Medium 13Low 5
Watch
Add OpenVPN to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-15497 | 3.8 | Jan 30 | Insufficient epoch key slot processing in OpenVPN 2.7_alpha1 through 2.7_rc5 allows remote authenticated users to trigger an assert resulting in a denial of service Affected: 2.7_alpha1 through 2.7_rc5 |
| CVE-2020-11810 | 3.7 | Apr 27 | An issue was discovered in OpenVPN 2.4.x before 2.4.9 Affected: 2.4.0 before 2.4.9 |
| CVE-2026-81738 | 2.3 | Sep 7 | OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries Affected: 2.5.0 through 2.7.6 |
| CVE-2026-63650 | 2.0 | Aug 14 | OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field Affected: 2.7_alpha1 before 2.7.6 |
| CVE-2026-82312 | 1.8 | Sep 7 | OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC objects Affected: 2.0.0 through 2.6.22; 2.7_alpha1 through 2.7.6 |
Showing 5