TL
Vendor
The Libreswan Project
8
CVEs
0
On KEV
4
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-77207 | LI libreswan The Libreswan Project | 7.5 | Oct 13 | Null Pointer Dereference in PKCS#7 bundle with no certificates |
| CVE-2026-77206 | LI libreswan The Libreswan Project | 7.5 | Oct 13 | IKEv2 pre-authentication Null Pointer Dereference in EAP code |
| CVE-2026-77205 | LI libreswan The Libreswan Project | 3.7 | Oct 13 | Denial of Service via sending bogus X.509 certificates |
| CVE-2026-94453 | LI libreswan The Libreswan Project | 7.5 | Oct 13 | IKEv2 Use-After-Free bug when using IKE-over-TCP |
| CVE-2026-14957 | LI libreswan The Libreswan Project | 7.5 | Sep 2 | FIPS mode assertion failure via malicious CERT payload |
| CVE-2026-50721 | LI libreswan The Libreswan Project | 5.9 | Jul 2 | IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload |
| CVE-2026-50722 | LI libreswan The Libreswan Project | 5.9 | Jul 2 | IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload |
| CVE-2026-12413 | LI libreswan The Libreswan Project | 7.5 | Jul 2 | IKEv2 Denial of Service via malformed fragmentation |