CVEs published by OpenVPN Inc.

CVEs published by OpenVPN Inc. (CVE Numbering Authority). 5 tracked.

CVE-2026-106017 MEDIUM 6.3 Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to c
CVE-2026-84790 HIGH 7.6 OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certifi
CVE-2026-84471 HIGH 7.2 The fix for CVE-2026-12996 was incomplete
CVE-2026-88964 HIGH 7.1 An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenti
CVE-2026-105390 MEDIUM 6.9 Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 throug