PatchTheCVE: tinchttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-16758: Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-thehttps://patchthecve.com/cve/CVE-2018-16758.htmlhttps://patchthecve.com/cve/CVE-2018-16758.htmlWed, 17 Jun 2026 01:44:46 +0000MEDIUM 5.9: Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle attack to disable the encryption of VPN packets.CVE-2018-16738: tinc 1.0.30 through 1.0.34 has a broken authentication protocol, although there is a partial mitigationhttps://patchthecve.com/cve/CVE-2018-16738.htmlhttps://patchthecve.com/cve/CVE-2018-16738.htmlWed, 17 Jun 2026 01:44:44 +0000LOW 3.7: tinc 1.0.30 through 1.0.34 has a broken authentication protocol, although there is a partial mitigation. This is fixed in 1.1.CVE-2018-16737: tinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation.https://patchthecve.com/cve/CVE-2018-16737.htmlhttps://patchthecve.com/cve/CVE-2018-16737.htmlWed, 17 Jun 2026 01:44:44 +0000MEDIUM 5.3: tinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation.