Do Son CVE-2026-19586 (CVSS 9.3) is a pre-authentication OS command injection in TP-Link Omada gateways running OpenVPN Server. Patch the firmware now.
openvpn
CVE-2026-9044 is a command injection flaw in TP-Link Archer AXE75 OpenVPN, CVSS 8.5. Update to firmware 1.5.6 Build 20260623 now.
OpenVPN released an urgent patch (v2.7_rc2) fixing two critical flaws: a Heap Over-read (CVE-2025-12106, CVSS 9.1) and an HMAC bypass (CVE-2025-13086) that allows unauthenticated DoS. Windows 7 support is broken.
A High-severity OpenVPN flaw (CVE-2025-10680) in beta versions allows script injection on Unix-like clients (Linux, macOS). Malicious DNS/DHCP arguments can execute arbitrary commands on the client side.
A flaw in the OpenVPN Windows kernel driver allows unprivileged local users to crash systems (BSOD) via oversized control packets. Update to 2.6.14-I002.
SUSE disclosed flaws in sslh (CVE-2025-46807, CVE-2025-46806) allowing remote DoS attacks via file descriptor exhaustion and unsafe memory access.
OpenVPN 2.6.14 addresses CVE-2025-2704 to prevent denial of service. Ensure your VPN is secure against this vulnerability.
Discover the critical vulnerability CVE-2024-5594 in OpenVPN 2.6.11. Learn how attackers can inject arbitrary data and execute code or cause denial-of-service.
Discover the vulnerability (CVE-2024-8474) that could have exposed your private keys and decrypted your VPN traffic. Stay protected with a secure VPN connection
A new study presented at the PETS 2024 has revealed a vulnerability in popular VPN protocols like OpenVPN and WireGuard, dubbed "port shadow"
OpenVPN, a leading provider of virtual private network solutions, has refuted claims of zero-day vulnerabilities in its OpenVPN2 software
Vladimir Tokarev will detail a series of critical zero-day vulnerabilities (OVPNX) in OpenVPN, the world's leading VPN solution
OpenVPN has released critical security updates (version 2.6.10) to address a series of vulnerabilities in its Windows software
OpenVPN has released version 2.6.9 for Windows, Mac, and Linux, addressing a severe privilege escalation vulnerability (CVE-2023-7235)
CVE-2023-46850, is a more severe use-after-free memory security issue that could allow attackers to leak sensitive information