CVE-2026-106017
Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions.
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
За последние 30 дней в openvpn3-client опубликовано уязвимостей: 1; в каталоге KEV: 0.
Уязвимостей: 2
Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions.
The configuration initialization tool in OpenVPN 3 Linux v20 through v24 on Linux allows a local attacker to use symlinks pointing at an arbitrary directory which will change the ownership and permissions of that destination directory.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.