Advisories · Technology

OpenVPN.

Every CVE that names OpenVPN among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-84471 CVE record

CVSS 7.2 High

Use after free in OpenVPN
- OpenVPN
- Memory corruption
Not analysed yet 14 Oct 2026
CVE-2026-88964 CVE record

CVSS 7.1 High

Integer underflow in OpenVPN
- OpenVPN
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-84790 CVE record

CVSS 7.6 High

Authentication bypass by spoofing in OpenVPN
- OpenVPN
- Authentication bypass
- CWE-158
Not analysed yet 13 Oct 2026
CVE-2026-84732 CVE record

CVSS 8.7 High

Integer overflow in OpenVPN
- OpenVPN
- Memory corruption
Not analysed yet 7 Sept 2026
CVE-2026-84256 CVE record

CVSS 7.7 High

OS command injection in OpenVPN
- OpenVPN
- Command injection
Not analysed yet 7 Sept 2026
CVE-2026-84226 CVE record

CVSS 8.5 High

Untrusted search path in OpenVPN
- OpenVPN
- CWE-426
Not analysed yet 7 Sept 2026
CVE-2026-82312 CVE record

CVSS 1.8 Low

Incorrect permission assignment in OpenVPN
- OpenVPN
- Broken access control
- CWE-412
Not analysed yet 7 Sept 2026
CVE-2026-81830 CVE record

CVSS 5.6 Medium

External control of a file path in OpenVPN
- OpenVPN
- Path traversal
Not analysed yet 7 Sept 2026
CVE-2026-81738 CVE record

CVSS 2.3 Low

Stack-based buffer overflow in OpenVPN
- OpenVPN
- Memory corruption
- CWE-193
Not analysed yet 7 Sept 2026
CVE-2026-78221 CVE record

CVSS 5.9 Medium

Incorrect buffer size calculation in OpenVPN
- OpenVPN
- Memory corruption
Not analysed yet 7 Sept 2026
CVE-2026-78043 CVE record

CVSS 5.6 Medium

Path traversal in OpenVPN
- OpenVPN
- Path traversal
Not analysed yet 7 Sept 2026
CVE-2026-63650 CVE record

CVSS 2.0 Low

Improper certificate validation in OpenVPN
- OpenVPN
- Weak cryptography or TLS
- CWE-115
Not analysed yet 14 Aug 2026
CVE-2026-63649 CVE record

CVSS 4.1 Medium

OpenVPN: The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7_alpha1 through…
- OpenVPN
- CWE-183
Not analysed yet 14 Aug 2026
CVE-2026-12932 CVE record

CVSS 7.1 High

Memory leak in OpenVPN
- OpenVPN
- Denial of service
Not analysed yet 30 Jul 2026
CVE-2026-12996 CVE record

CVSS 6.0 Medium

Use after free in OpenVPN
- OpenVPN
- Memory corruption
Not analysed yet 30 Jul 2026
CVE-2026-11771 CVE record

CVSS 7.0 High

Off-by-one error in OpenVPN
- OpenVPN
- Memory corruption
- CWE-193
Not analysed yet 30 Jul 2026
CVE-2026-13117 CVE record

CVSS 6.0 Medium

Use after free in OpenVPN
- OpenVPN
- Memory corruption
Not analysed yet 30 Jul 2026
CVE-2026-13379 CVE record

CVSS 5.1 Medium

Out-of-bounds read in OpenVPN
- OpenVPN
- Memory corruption
- CWE-142
Not analysed yet 30 Jul 2026
CVE-2026-13122 CVE record

CVSS 5.9 Medium

Reachable assertion in OpenVPN
- OpenVPN
- Denial of service
Not analysed yet 6 Jul 2026
CVE-2026-13698 CVE record

CVSS 6.0 Medium

Memory leak in OpenVPN
- OpenVPN
- Denial of service
Not analysed yet 6 Jul 2026
CVE-2026-40215 CVE record

CVSS 6.1 Medium

Out-of-bounds read in OpenVPN
- OpenVPN
- Memory corruption
Not analysed yet 8 Jun 2026
CVE-2026-35058 CVE record

CVSS 6.9 Medium

Reachable assertion in OpenVPN
- OpenVPN
- Denial of service
Not analysed yet 8 Jun 2026
CVE-2025-15497 CVE record

CVSS 3.8 Low

Reachable assertion in OpenVPN
- OpenVPN
- Denial of service
Not analysed yet 30 Jan 2026
CVE-2025-13086 CVE record

CVSS 4.6 Medium

OpenVPN: Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and…
- OpenVPN
- CWE-940
Not analysed yet 3 Dec 2025
CVE-2025-13751 CVE record

CVSS 1.3 Low

Resource allocation without limits in OpenVPN
- OpenVPN
- Denial of service
- CWE-775
Not analysed yet 3 Dec 2025
CVE-2025-12106 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

OpenVPN: Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker…
- OpenVPN
- CWE-126
Not analysed yet 1 Dec 2025
CVE-2025-10680 CVE record

CVSS 8.8 High

OS command injection in OpenVPN
- OpenVPN
- Command injection
Not analysed yet 24 Oct 2025
CVE-2024-4877 CVE record

CVSS 8.8 High

OpenVPN: OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external…
- OpenVPN
- Privilege escalation
Not analysed yet 3 Apr 2025
CVE-2025-2704 CVE record

CVSS 7.5 High

Improper check for unusual conditions in OpenVPN
- OpenVPN
- CWE-754
Not analysed yet 2 Apr 2025
CVE-2024-5594 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

OpenVPN: OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker…
- OpenVPN
- CWE-1287
Not analysed yet 6 Jan 2025
CVE-2024-28882 CVE record

CVSS 4.3 Medium

Resource leak in OpenVPN
- OpenVPN
- Denial of service
Not analysed yet 8 Jul 2024
CVE-2023-7235 CVE record

CVSS 8.4 High

Incorrect default permissions in OpenVPN
- OpenVPN
- Broken access control
Not analysed yet 21 Feb 2024
CVE-2022-0547 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

OpenVPN: OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external…
- OpenVPN
- CWE-305
Not analysed yet 18 Mar 2022
CVE-2020-15078 CVE record

OpenVPN: OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and…
- OpenVPN
- CWE-305
Not analysed yet 26 Apr 2021
CVE-2017-7522 CVE record

Improper input validation in OpenVPN
- OpenVPN
- CWE-20
Not analysed yet 27 Jun 2017
CVE-2017-7521 CVE record

Uncontrolled resource consumption in OpenVPN
- OpenVPN
- Denial of service
Not analysed yet 27 Jun 2017
CVE-2017-7520 CVE record

Information disclosure in OpenVPN
- OpenVPN
- Information disclosure
Not analysed yet 27 Jun 2017
CVE-2017-7508 CVE record

OpenVPN: OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote…
- OpenVPN
Not analysed yet 27 Jun 2017
CVE-2017-7479 CVE record

Reachable assertion in openvpn
- openvpn
- Denial of service
Not analysed yet 15 May 2017
CVE-2017-7478 CVE record

Reachable assertion in openvpn
- openvpn
- Denial of service
Not analysed yet 15 May 2017