https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-7043.htmlhttps://patchthecve.com/cve/CVE-2020-7043.htmlWed, 17 Jun 2026 03:24:11 +0000CRITICAL 9.1: An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c mishandles certificate validation because hostname comparisons do not consider '\0' characters, as demonstrated by a good.example.com\x00evil.example.com attack.https://patchthecve.com/cve/CVE-2020-7042.htmlhttps://patchthecve.com/cve/CVE-2020-7042.htmlWed, 17 Jun 2026 03:24:10 +0000MEDIUM 5.3: An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because the hostname check operates on uninitialized memory. The outcome is that a valid certificate is never accepted (only a malformed certificate may be accepted).https://patchthecve.com/cve/CVE-2020-7041.htmlhttps://patchthecve.com/cve/CVE-2020-7041.htmlWed, 17 Jun 2026 03:24:10 +0000MEDIUM 5.3: An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because an X509_check_host negative error code is interpreted as a successful return value.