https://vulnogram.org/ Most recent CVEs assigned by OpenVPN Inc. (openvpn). https://vulnogram.org/seaview/icons/openvpn.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-84471 https://vulnogram.org/CVE-2026-84471 The fix for CVE-2026-12996 was incomplete. A use-after-free in OpenVPN 2.6.0 through 2.6.22 and 2.7_alpha1 through 2.7.7 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted packets during TLS session… High Wed, 14 Oct 2026 14:29:04 GMT https://vulnogram.org/CVE-2026-105390 https://vulnogram.org/CVE-2026-105390 Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive. Medium Tue, 13 Oct 2026 22:44:38 GMT https://vulnogram.org/CVE-2026-88964 https://vulnogram.org/CVE-2026-88964 An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disclosure via crafted domain search options High Tue, 13 Oct 2026 22:15:08 GMT https://vulnogram.org/CVE-2026-84790 https://vulnogram.org/CVE-2026-84790 OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field High Tue, 13 Oct 2026 21:39:05 GMT https://vulnogram.org/CVE-2026-82325 https://vulnogram.org/CVE-2026-82325 A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages Medium Mon, 07 Sep 2026 11:03:14 GMT https://vulnogram.org/CVE-2026-84732 https://vulnogram.org/CVE-2026-84732 Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs that trigger a timeout integer overflow High Network Exploitable Mon, 07 Sep 2026 08:16:40 GMT https://vulnogram.org/CVE-2026-84256 https://vulnogram.org/CVE-2026-84256 An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.7 on Windows allows remote authenticated users to execute arbitrary commands via a crafted certificate subject High Mon, 07 Sep 2026 07:55:27 GMT https://vulnogram.org/CVE-2026-84226 https://vulnogram.org/CVE-2026-84226 OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during network configuration steps High Mon, 07 Sep 2026 07:47:04 GMT https://vulnogram.org/CVE-2026-82312 https://vulnogram.org/CVE-2026-82312 OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC objects Low Mon, 07 Sep 2026 07:40:14 GMT https://vulnogram.org/CVE-2026-81830 https://vulnogram.org/CVE-2026-81830 The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path validation Medium Mon, 07 Sep 2026 07:36:19 GMT https://vulnogram.org/CVE-2026-81738 https://vulnogram.org/CVE-2026-81738 OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries Low Network Exploitable Mon, 07 Sep 2026 07:32:20 GMT https://vulnogram.org/CVE-2026-78221 https://vulnogram.org/CVE-2026-78221 An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to cause memory corruption or disclose sensitive information via crafted NRPT inputs. Medium Mon, 07 Sep 2026 07:28:14 GMT https://vulnogram.org/CVE-2026-78043 https://vulnogram.org/CVE-2026-78043 The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via specially crafted paths Medium Mon, 07 Sep 2026 07:21:20 GMT https://vulnogram.org/CVE-2026-63650 https://vulnogram.org/CVE-2026-63650 OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field Low Fri, 14 Aug 2026 22:13:26 GMT https://vulnogram.org/CVE-2026-63649 https://vulnogram.org/CVE-2026-63649 The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7_alpha1 through 2.7.5 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via crafted options that byp… Medium Fri, 14 Aug 2026 22:13:21 GMT https://vulnogram.org/CVE-2026-12932 https://vulnogram.org/CVE-2026-12932 A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service (memory exhaustion) via a flood of crafted packets High Thu, 30 Jul 2026 16:42:03 GMT https://vulnogram.org/CVE-2026-12996 https://vulnogram.org/CVE-2026-12996 A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted packets during TLS session promotion or expiry Medium Thu, 30 Jul 2026 16:38:58 GMT https://vulnogram.org/CVE-2026-11771 https://vulnogram.org/CVE-2026-11771 OpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attackers via an off-by-one buffer write in the NTLM proxy authentication to potentially cause a crash via a crafted NTLM response from a malicious proxy server High Network Exploitable Thu, 30 Jul 2026 16:36:41 GMT https://vulnogram.org/CVE-2026-13117 https://vulnogram.org/CVE-2026-13117 An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-free during TLS session promotion, potentially leading to a denial of service or memory leakage Medium Thu, 30 Jul 2026 16:32:42 GMT https://vulnogram.org/CVE-2026-13379 https://vulnogram.org/CVE-2026-13379 The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a crafted search domain during the disconnection process Medium Thu, 30 Jul 2026 16:28:19 GMT https://vulnogram.org/CVE-2025-3110 https://vulnogram.org/CVE-2025-3110 OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggling when deployed behind a reverse proxy Medium Network Exploitable Wed, 08 Jul 2026 16:19:38 GMT https://vulnogram.org/CVE-2026-13122 https://vulnogram.org/CVE-2026-13122 OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service via a malformed authentication token that triggers a reachable assertion when external-auth is enabled Medium Mon, 06 Jul 2026 14:32:29 GMT https://vulnogram.org/CVE-2026-13698 https://vulnogram.org/CVE-2026-13698 A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers with a valid tls-crypt-v2 client key to potentially cause a denial of service Medium Network Exploitable Mon, 06 Jul 2026 14:13:49 GMT https://vulnogram.org/CVE-2026-11604 https://vulnogram.org/CVE-2026-11604 An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authenticated peer to trigger a heap-based buffer overflow and kernel memory corruption via a crafted data packet, res… Medium Wed, 10 Jun 2026 21:04:37 GMT https://vulnogram.org/CVE-2026-40215 https://vulnogram.org/CVE-2026-40215 A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during TLS session promotion. Medium Mon, 08 Jun 2026 19:59:20 GMT https://vulnogram.org/CVE-2026-35058 https://vulnogram.org/CVE-2026-35058 Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows authenticated attackers to trigger a fatal assertion and cause a denial of service via a specially crafted pac… Medium Mon, 08 Jun 2026 19:29:56 GMT https://vulnogram.org/CVE-2026-9560 https://vulnogram.org/CVE-2026-9560 Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC channel Critical Network Exploitable Tue, 26 May 2026 17:39:57 GMT https://vulnogram.org/CVE-2026-2738 https://vulnogram.org/CVE-2026-2738 Buffer overflow in ovpn‑dco‑win version 2.8.0 allows local attackers to cause a system crash by sending too large packets to the remote peer when the AEAD tag appears at the end of the encrypted packet Medium Thu, 19 Feb 2026 20:00:30 GMT https://vulnogram.org/CVE-2025-15497 https://vulnogram.org/CVE-2025-15497 Insufficient epoch key slot processing in OpenVPN 2.7_alpha1 through 2.7_rc5 allows remote authenticated users to trigger an assert resulting in a denial of service Low Fri, 30 Jan 2026 18:06:07 GMT https://vulnogram.org/CVE-2025-13086 https://vulnogram.org/CVE-2025-13086 Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service… Medium Network Exploitable Wed, 03 Dec 2025 19:54:10 GMT https://vulnogram.org/CVE-2025-13751 https://vulnogram.org/CVE-2025-13751 Interactive service agent in OpenVPN version 2.5.0 through 2.6.16 and 2.7_alpha1 through 2.7_rc2 on Windows allows a local authenticated user to connect to the service and trigger an error causing a local denial of service. Low Wed, 03 Dec 2025 16:22:35 GMT https://vulnogram.org/CVE-2025-12106 https://vulnogram.org/CVE-2025-12106 Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses Critical Network Exploitable Mon, 01 Dec 2025 12:43:02 GMT https://vulnogram.org/CVE-2025-50055 https://vulnogram.org/CVE-2025-50055 Cross-site scripting (XSS) vulnerability in the SAML Authentication module in OpenVPN Access Server version 2.14.0 through 2.14.3 allows configured remote SAML Assertion Consumer Service (ACS) endpoint servers to inject arbitrary web script or HTML v… Medium Mon, 27 Oct 2025 13:39:43 GMT https://vulnogram.org/CVE-2025-10680 https://vulnogram.org/CVE-2025-10680 OpenVPN 2.7_alpha1 through 2.7_beta1 on POSIX based platforms allows a remote authenticated server to inject shell commands via DNS variables when --dns-updown is in use High Fri, 24 Oct 2025 10:06:51 GMT https://vulnogram.org/CVE-2025-50054 https://vulnogram.org/CVE-2025-50054 Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too large control message buffer to the kernel driver resulting in a system crash Medium Fri, 20 Jun 2025 06:29:01 GMT https://vulnogram.org/CVE-2025-3908 https://vulnogram.org/CVE-2025-3908 The configuration initialization tool in OpenVPN 3 Linux v20 through v24 on Linux allows a local attacker to use symlinks pointing at an arbitrary directory which will change the ownership and permissions of that destination directory. Medium Mon, 19 May 2025 14:59:08 GMT https://vulnogram.org/CVE-2024-4877 https://vulnogram.org/CVE-2024-4877 OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to allowing it to escalate its privileges High Thu, 03 Apr 2025 15:11:51 GMT https://vulnogram.org/CVE-2025-2704 https://vulnogram.org/CVE-2025-2704 OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting and replaying network packets in the early handshake phase High Network Exploitable Wed, 02 Apr 2025 21:00:58 GMT https://vulnogram.org/CVE-2024-13454 https://vulnogram.org/CVE-2024-13454 Weak encryption algorithm in Easy-RSA version 3.0.5 through 3.1.7 allows a local attacker to more easily bruteforce the private CA key when created using OpenSSL 3 Medium Mon, 20 Jan 2025 21:07:50 GMT https://vulnogram.org/CVE-2024-5198 https://vulnogram.org/CVE-2024-5198 OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivileged local attacker to send I/O control messages with invalid data to the driver resulting in a NULL pointer dereference leading to a system halt. Low Wed, 15 Jan 2025 12:57:25 GMT https://vulnogram.org/CVE-2024-8474 https://vulnogram.org/CVE-2024-8474 OpenVPN Connect before version 3.5.0 can contain the configuration profile's clear-text private key which is logged in the application log, which an unauthorized actor can use to decrypt the VPN traffic High Network Exploitable Mon, 06 Jan 2025 14:33:26 GMT https://vulnogram.org/CVE-2024-5594 https://vulnogram.org/CVE-2024-5594 OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker controlling the server can use to inject unexpected arbitrary data ending up in client logs. Critical Network Exploitable Mon, 06 Jan 2025 13:52:20 GMT https://vulnogram.org/CVE-2024-28882 https://vulnogram.org/CVE-2024-28882 OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session Medium Mon, 08 Jul 2024 21:30:24 GMT https://vulnogram.org/CVE-2024-1305 https://vulnogram.org/CVE-2024-1305 tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overflow memory buffers, resulting in a bug check and potentially arbitrary code execution in kernel space Critical Network Exploitable Mon, 08 Jul 2024 17:27:44 GMT https://vulnogram.org/CVE-2024-27903 https://vulnogram.org/CVE-2024-27903 OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used to interact with the privileged OpenVPN interactive service. High Mon, 08 Jul 2024 10:27:40 GMT https://vulnogram.org/CVE-2024-24974 https://vulnogram.org/CVE-2024-24974 The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVPN interactive service. High Network Exploitable Mon, 08 Jul 2024 10:20:34 GMT https://vulnogram.org/CVE-2024-27459 https://vulnogram.org/CVE-2024-27459 The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges. High Mon, 08 Jul 2024 10:14:06 GMT https://vulnogram.org/CVE-2023-7235 https://vulnogram.org/CVE-2023-7235 The OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions to the installation directory of OpenVPN binaries when using a non-standard installation path, which allows an attacker to replace binaries to run arbit… High Wed, 21 Feb 2024 10:55:15 GMT https://vulnogram.org/CVE-2023-6247 https://vulnogram.org/CVE-2023-6247 The PKCS#7 parser in OpenVPN 3 Core Library versions through 3.8.3 did not properly validate the parsed data, which would result in the application crashing. Medium Tue, 20 Feb 2024 18:43:17 GMT https://vulnogram.org/CVE-2023-7245 https://vulnogram.org/CVE-2023-7245 The nodejs framework in OpenVPN Connect 3.0 through 3.4.3 (Windows)/3.4.7 (macOS) was not properly configured, which allows a local user to execute arbitrary code within the nodejs process context via the ELECTRON_RUN_AS_NODE environment variable High Tue, 20 Feb 2024 11:08:29 GMT