LI
Product
libreswan
8
CVEs
0
On KEV
7.5
Max CVSS
4
New 30D
Severity mix
Critical 0High 5Medium 2Low 1
Watch
Add libreswan to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-77207 | 7.5 | Oct 13 | Null Pointer Dereference in PKCS#7 bundle with no certificates Affected: 4.7 through 5.3.2; 5.4 through 5.4 |
| CVE-2026-77206 | 7.5 | Oct 13 | IKEv2 pre-authentication Null Pointer Dereference in EAP code Affected: 4.7 through 5.3.2; 5.4 through 5.4 |
| CVE-2026-94453 | 7.5 | Oct 13 | IKEv2 Use-After-Free bug when using IKE-over-TCP Affected: 4.0 through 5.3.2; 5.4 through 5.4 |
| CVE-2026-14957 | 7.5 | Sep 2 | FIPS mode assertion failure via malicious CERT payload Affected: 3.0 through 5.3.1 |
| CVE-2026-12413 | 7.5 | Jul 2 | IKEv2 Denial of Service via malformed fragmentation Affected: 4.6 through 5.3 |
Showing 5
