Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-13122

Опубликовано: 06 июл. 2026
Источник: nvd
CVSS3: 5.3
EPSS Низкий

Описание

OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service via a malformed authentication token that triggers a reachable assertion when external-auth is enabled

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:openvpn:openvpn:*:*:*:*:community:*:*:*
Версия от 2.6.0 (включая) до 2.6.21 (исключая)
cpe:2.3:a:openvpn:openvpn:*:*:*:*:community:*:*:*
Версия от 2.7 (включая) до 2.7.5 (исключая)

EPSS

Процентиль: 22%
0.00294
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-617

Связанные уязвимости

CVSS3: 5.3
ubuntu
24 дня назад

OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service via a malformed authentication token that triggers a reachable assertion when external-auth is enabled

CVSS3: 5.3
redhat
24 дня назад

OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service via a malformed authentication token that triggers a reachable assertion when external-auth is enabled

CVSS3: 5.3
debian
24 дня назад

OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allo ...

CVSS3: 5.3
github
24 дня назад

OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service via a malformed authentication token that triggers a reachable assertion when external-auth is enabled

EPSS

Процентиль: 22%
0.00294
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-617