CVE Watchtower ← Back to CVE ListCVE-2026-63650NVDVulnerability SummaryOpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup fieldSeverity LevelUNKNOWNPublished DateAug 14, 2026Last ModifiedAug 17, 2026Exploitation StatusNo confirmed exploitation yetEPSS Score (30-Day)0.36%ProbabilityRoot Weakness (CWE)N/AExternal Referenceshttps://community.openvpn.net/Security%20Announcements/CVE-2026-63650https://community.openvpn.net/ReleaseHistory#openvpn-276-released-5-august-2026