CVE-2026-108523 - A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unkn

CVE-2026-98371 - In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix runt reassembl

CVE-2026-86131 - A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handl

CVE-2026-86101 - An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remo

CVE-2026-101859 - A vulnerability has been found in RaspAP raspap-webgui up to 3.5.5. Affected by this vulnerability i

CVE-2026-94417 - When an application enables both OCSP and CRL revocation checking on one WOLFSSL_CTX or certificate

CVE-2026-91841 - A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user

CVE-2026-91840 - A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to esca

CVE-2026-91839 - A flaw was found in NetworkManager-fortisslvpn, the FortiSSLVPN plugin for NetworkManager. The nm-fo

CVE-2026-91838 - A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivilege

CVE-2026-91837 - A flaw was found in NetworkManager-iodine, the iodine VPN plugin for NetworkManager. A local unprivi

CVE-2026-98023 - In the Linux kernel, the following vulnerability has been resolved: vxlan: reject dynamic fdb entri

CVE-2026-97419 - In the Linux kernel, the following vulnerability has been resolved: hsr: broadcast netlink notifica

CVE-2026-75131 - NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains a privilege escalation vulnerability t

CVE-2026-93345 - MikroTik RouterOS before 7.25beta4 contains an improper input validation vulnerability in the labell

CVE-2026-93337 - NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains an improper input validation vulnerabi

CVE-2026-54504 - MCP Documentation Server is a local-first document management and semantic search server for AI codi

CVE-2026-8674 - Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment varia

CVE-2026-90823 - FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 con

CVE-2026-90822 - FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 con

CVE-2026-20249 - A vulnerability in the certification authentication feature of Internet Key Exchange version 2 (IKEv

CVE-2026-92256 - NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in l2tpd_config

CVE-2026-76871 - Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in mod_

CVE-2026-91853 - A vulnerability has been found in TOTOLINK X5000R 9.1.0cu.2089_B20211224. The impacted element is th

CVE-2026-19624 - A flaw was found in NetworkManager-l2tp. The plugin writes attacker-controlled VPN connection proper

CVE-2026-50025 - Mousehole is a background service to update a seedbox IP for MAM and web app to manage it. Prior to

CVE-2026-76653 - A missing authentication vulnerability in the VPN configuration management has been identified in Ar

CVE-2026-85103 - A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote a

CVE-2026-85102 - Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway

CVE-2026-82325 - A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows

CVE-2026-84732 - Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated at

CVE-2026-84256 - An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.7 on Windows

CVE-2026-84226 - OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authentica

CVE-2026-82312 - OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated user

CVE-2026-81830 - The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to

CVE-2026-81738 - OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an

CVE-2026-78221 - An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7_alpha1 throug

CVE-2026-78043 - The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users

CVE-2026-75925 - Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker

CVE-2026-63464 - nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. From version 0.6.0 to before v

CVE-2026-61699 - nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.7.1, revoca

CVE-2026-55513 - nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. From version 0.3.0 to before v

CVE-2026-55512 - nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. From version 0.2.0 to before v

CVE-2026-53604 - nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, the we

CVE-2026-53603 - nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, Operat

CVE-2026-53602 - nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.7, two re

CVE-2026-80753 - In the Linux kernel, the following vulnerability has been resolved: ovpn: run deferred work on a mo

CVE-2026-80735 - In the Linux kernel, the following vulnerability has been resolved: ovpn: ensure socket is owned by

CVE-2026-84191 - LibreNMS before 26.5.0 contains stored cross-site scripting vulnerabilities in VRF display pages whe

CVE-2026-51693 - Incorrect access control in the setVpnPassCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows u

CVE-2026-13735 - Zephyr's WireGuard implementation in subsys/net/lib/wireguard/wg_crypto.c mishandled keepalive packe

CVE-2026-13734 - Zephyr's WireGuard VPN data-plane receive handler wg_process_data_message() in subsys/net/lib/wiregu

CVE-2026-51656 - Incorrect access control in the getVpnPassCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows u

CVE-2026-78011 - An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauth

CVE-2026-78010 - A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a rem

CVE-2026-78009 - An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unaut

CVE-2026-19317 - An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unaut

CVE-2026-19316 - A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticat

CVE-2026-19314 - An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauth

CVE-2026-80520 - In the Linux kernel, the following vulnerability has been resolved: ovpn: fix NULL dereference when

CVE-2026-80519 - In the Linux kernel, the following vulnerability has been resolved: ovpn: finish crypto callback cl

CVE-2026-74750 - In the Linux kernel, the following vulnerability has been resolved: ovpn: defer key slot crypto fre

CVE-2026-16348 - An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with

CVE-2026-74727 - In the Linux kernel, the following vulnerability has been resolved: ovpn: skip rehash for peers alr

CVE-2026-49360 - Recce is a data-validation toolkit for enhanced dbt (data build tool) PR review. Prior to version 1.

CVE-2026-19586 - A pre-authentication OS command injection vulnerability has been identified in Omada gateways config

CVE-2026-73973 - Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems.

CVE-2026-63650 - OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified

CVE-2026-63649 - The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7_alpha1 through 2.7.5 allows

CVE-2026-72841 - luci-app-openvpn fails to properly validate the instance_name2 parameter during file upload, allowin

CVE-2026-0296 - Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an u

CVE-2026-20349 - A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security App

CVE-2026-68342 - In the Linux kernel, the following vulnerability has been resolved: ovpn: avoid putting unrelated P

CVE-2026-68341 - In the Linux kernel, the following vulnerability has been resolved: ovpn: fix use after free in unl

CVE-2026-68122 - In the Linux kernel, the following vulnerability has been resolved: ovpn: fix peer refcount leak in

CVE-2026-71993 - MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the

CVE-2026-66151 - SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel

CVE-2026-14818 - A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP s

CVE-2026-18602 - A vulnerability was determined in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function ovpn-clien

CVE-2026-18601 - A vulnerability was found in GL.iNet GL-MT3000 up to 4.4.5. This impacts the function ovpn-client.ch

CVE-2026-9044 - An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vul

CVE-2026-13379 - The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause

CVE-2026-13117 - An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authe

CVE-2026-12996 - A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenti

CVE-2026-12932 - A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7_alph

CVE-2026-11771 - OpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attackers via an off-by-one

CVE-2026-67245 - A path traversal vulnerability was found in the VPN Clients on the ADM. The vulnerability occurs bec

CVE-2026-49258 - Nebula Mesh is a self-hosted control plane for the Slack Nebula mesh VPN. In versions 0.3.5 and belo

CVE-2026-64045 - In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - use cached peer poi

CVE-2026-64044 - In the Linux kernel, the following vulnerability has been resolved: ovpn: respect peer refcount in

CVE-2026-64043 - In the Linux kernel, the following vulnerability has been resolved: ovpn: fix race between deleting