Do Son A new strongSwan CVE-2026-47895 vulnerability allows remote code execution via a libstrongswan double-free exploit. Patch your VPN servers now!
strongSwan
strongSwan fixes a high-severity DoS flaw (CVE-2026-25075) in eap-ttls. Unauthenticated actors can crash VPN gateways. Patch now to stay protected!
A Critical Heap Overflow in strongSwan's EAP-MSCHAPv2 plugin allows Remote Code Execution on the client. An integer underflow in Failure Request packet processing causes memory corruption.
CVE-2023-41913 is a critical security vulnerability that could allow remote attackers to execute arbitrary code on affected systems
CVE-2023-26463 vulnerability can allow an attacker to bypass authentication and potentially execute remote code on your system.