Do Son OpenVPN released an urgent patch (v2.7_rc2) fixing two critical flaws: a Heap Over-read (CVE-2025-12106, CVSS 9.1) and an HMAC bypass (CVE-2025-13086) that allows unauthenticated DoS. Windows 7 support is broken.
OpenVPN released an urgent patch (v2.7_rc2) fixing two critical flaws: a Heap Over-read (CVE-2025-12106, CVSS 9.1) and an HMAC bypass (CVE-2025-13086) that allows unauthenticated DoS. Windows 7 support is broken.