CVE-2026-63650 - OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified

CVE-2026-63649 - The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7_alpha1 through 2.7.5 allows

CVE-2026-64045 - In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - use cached peer poi

CVE-2026-64044 - In the Linux kernel, the following vulnerability has been resolved: ovpn: respect peer refcount in

CVE-2026-64043 - In the Linux kernel, the following vulnerability has been resolved: ovpn: fix race between deleting

CVE-2026-8616 - The Fense Proxy & VPN Blocker plugin for WordPress is vulnerable to unauthorized modification of dat

CVE-2026-63089 - WireGuard Easy through 15.3.0, fixed in commit 66b292b, contains a cryptographically weak one-time l

CVE-2026-57399 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-57024 - A Use of Multiple Resources with Duplicate Identifier vulnerability in the IKE daemon (iked) of Juni

CVE-2026-57021 - An Out-of-bounds Write vulnerability in the http-gatekeeper (http-gk) of Juniper Networks Junos OS o

CVE-2026-57020 - An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engin

CVE-2026-0277 - An improper certificate validation vulnerability in the Prisma® Access Agent for iOS enables an atta

CVE-2026-0284 - An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks PA

CVE-2026-0283 - An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto Networ

CVE-2026-0279 - Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Por

CVE-2026-15204 - A vulnerability was detected in TOTOLINK X5000R 9.1.0cu.2415_B20250515/9.1.0cu.2350_B20230313. Affec

CVE-2025-3110 - OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values

CVE-2026-13122 - OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a

CVE-2026-13698 - A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1 through 2

CVE-2026-13368 - WatchGuard Fireware OS contains a race condition leading to a use-after-free vulnerability in LDAP a

CVE-2026-13084 - A null pointer dereference vulnerability in WatchGuard Fireware OS may allow a remote unauthenticate

CVE-2026-13079 - A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows

CVE-2026-8452 - Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or errone

CVE-2026-13474 - Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is

CVE-2026-10817 - Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if t

CVE-2026-58000 - luci-proto-openvpn through 0.11.1, fixed in commit e4ff45e, contains a command injection vulnerabili

CVE-2026-13372 - Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutions Remote

CVE-2026-11604 - An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.

CVE-2026-0268 - A security control bypass vulnerability in Prisma Access Agent for Linux allows a local attacker to

CVE-2026-9151 - An OS command injection vulnerability exists in the VPN module of TP-Link Archer AX12 v1, AX17 v1. A

CVE-2026-2638 - A vulnerability in the quarantine and restore workflow of the X-VPN macOS website versions 77.0 thro

CVE-2026-40215 - A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attacker

CVE-2026-35058 - Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6

CVE-2026-50752 - A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an una

CVE-2026-50751 - A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1

CVE-2026-11406 - A vulnerability was determined in GL.iNet MT3000 up to 4.4.5. This vulnerability affects unknown cod

CVE-2026-10872 - A vulnerability was found in Shibby Tomato 1.28.0000. This issue affects the function start_vpnserve

CVE-2025-12694 - A local privilege escalation vulnerability exists in Forcepoint VPN Client that allows a local non-a

CVE-2026-50206 - Incoming VPN network profile settings fail to process special characters safely, enabling command in

CVE-2026-38707 - A command injection vulnerability exists in the IPSec VPN feature of InHand Networks IR302 firmware

CVE-2026-38704 - A command injection vulnerability exists in the WireGuard VPN feature of InHand Networks IR302 firmw

CVE-2026-38703 - A command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks IR302 firmwa

CVE-2026-45929 - In the Linux kernel, the following vulnerability has been resolved: ovpn: fix possible use-after-fr

CVE-2026-45918 - In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - don't deref NULL sk

CVE-2026-9560 - Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows a

CVE-2026-48132 - The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is

CVE-2026-48131 - The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP duri

CVE-2018-25368 - Nord VPN 6.14.31 contains a denial of service vulnerability that allows unauthenticated attackers to

CVE-2026-9456 - A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function setOpenV

CVE-2026-9455 - A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the funct

CVE-2026-9454 - A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the functi

CVE-2026-32323 - Mullvad VPN is a VPN client app for desktop and mobile. When using macOS with versions 2026.1 and be