Login Request a demo
LI
Product
libreswan
by The Libreswan Project · last CVE Oct 13, 2026
8
CVEs
0
On KEV
7.5
Max CVSS
4
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 5Medium 2Low 1
Severity
All severities8Critical0High5Medium2Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add libreswan to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-77207
7.5
0%
Oct 13
Null Pointer Dereference in PKCS#7 bundle with no certificates
Affected: 4.7 through 5.3.2; 5.4 through 5.4
CVE-2026-77206
7.5
1%
Oct 13
IKEv2 pre-authentication Null Pointer Dereference in EAP code
Affected: 4.7 through 5.3.2; 5.4 through 5.4
CVE-2026-94453
7.5
0%
Oct 13
IKEv2 Use-After-Free bug when using IKE-over-TCP
Affected: 4.0 through 5.3.2; 5.4 through 5.4
CVE-2026-14957
7.5
0%
Sep 2
FIPS mode assertion failure via malicious CERT payload
Affected: 3.0 through 5.3.1
CVE-2026-12413
7.5
1%
Jul 2
IKEv2 Denial of Service via malformed fragmentation
Affected: 4.6 through 5.3
CVE-2026-50721
5.9
0%
Jul 2
IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload
Affected: through 5.3
CVE-2026-50722
5.9
0%
Jul 2
IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload
Affected: through 5.3
CVE-2026-77205
3.7
0%
Oct 13
Denial of Service via sending bogus X.509 certificates
Affected: 5.3 through 5.3.2
Showing 8