Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-13122

Опубликовано: 06 июл. 2026
Источник: nvd
CVSS3: 5.3
EPSS Низкий

Описание

OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service via a malformed authentication token that triggers a reachable assertion when external-auth is enabled

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:openvpn:openvpn:*:*:*:*:community:*:*:*
Версия от 2.6.0 (включая) до 2.6.21 (исключая)
cpe:2.3:a:openvpn:openvpn:*:*:*:*:community:*:*:*
Версия от 2.7 (включая) до 2.7.5 (исключая)

EPSS

Процентиль: 40%
0.00458
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-617

Связанные уязвимости

CVSS3: 5.3
ubuntu
4 месяца назад

OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service via a malformed authentication token that triggers a reachable assertion when external-auth is enabled

CVSS3: 5.3
redhat
4 месяца назад

OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service via a malformed authentication token that triggers a reachable assertion when external-auth is enabled

CVSS3: 5.3
debian
4 месяца назад

OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allo ...

CVSS3: 5.3
github
4 месяца назад

OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service via a malformed authentication token that triggers a reachable assertion when external-auth is enabled

suse-cvrf
3 месяца назад

Security update for openvpn

EPSS

Процентиль: 40%
0.00458
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-617