Open Source OpenVPN

Name: Open Source OpenVPN
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

5critical12high4medium0low

updated 2026-10-28

vulnerabilities (44)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-9560US	high7.8	0.57% (47th)	Exploit	no fix	2026-05-26	≤ Connect macOS <3.8.2
CVE-2024-1305US	—	15.4% (97th)	—	2.6.10	2024-07-08	< 2.6.10
CVE-2024-24974US	high7.5	9.76% (96th)	—	2.6.10	2024-07-08	< 2.6.10
CVE-2024-27903US	critical9.8	8.92% (95th)	—	2.6.10	2024-07-08	< 2.6.10
CVE-2024-27459US	high7.8	8.26% (95th)	—	2.6.10	2024-07-08	< 2.6.10
CVE-2025-10680US	—	7.34% (94th)	—	2.7_beta3	2025-10-24	< 2.7_beta3
CVE-2017-12166US	critical9.8	3.63% (89th)	—	2.4.4	2017-10-04	2 versions
CVE-2022-0547US	critical9.8	3.57% (89th)	—	2.4.12	2022-03-18	2 versions
CVE-2023-46850US	critical9.8	2.00% (81st)	—	2.6.7	2023-11-11	< 2.6.7
CVE-2023-46849US	high7.5	1.15% (67th)	—	2.6.7	2023-11-11	< 2.6.7
CVE-2025-2704US	—	0.84% (58th)	—	2.6.14	2025-04-02	< 2.6.14
CVE-2024-5594US	—	0.82% (57th)	—	2.6.11	2025-01-06	< 2.6.11
CVE-2024-28882US	—	0.66% (52nd)	—	2.6.11	2024-07-08	< 2.6.11
CVE-2025-13086US	high7.5OT elevated	0.64% (51st)	—	2.6.16	2025-12-03	2 versions
CVE-2025-12106US	—	0.56% (46th)	—	2.7_rc2	2025-12-01	< 2.7_rc2
CVE-2026-13698US	high7.5	0.55% (46th)	—	2.7.5	2026-07-06	< 2.7.5
CVE-2026-35058US	medium6.5	0.54% (45th)	—	2.7.2	2026-06-08	2 versions
CVE-2024-8474US	—	0.53% (45th)	—	no fix	2025-01-06	≤ Connect <3.5.0
CVE-2026-12996US	high8.1	0.46% (40th)	—	2.7.5	2026-07-30	< 2.7.5
CVE-2026-13122US	medium5.3	0.46% (40th)	—	2.7.5	2026-07-06	< 2.7.5
CVE-2025-3110US	high7.5	0.45% (39th)	—	no fix	2026-07-08	≤ Access Server <3.2.0
CVE-2024-4877US	—	0.44% (38th)	—	2.6.11	2025-04-03	< 2.6.11
CVE-2026-12932US	high8.1	0.42% (36th)	—	2.7.5	2026-07-30	< 2.7.5
CVE-2026-84471US	—	0.41% (35th)	—	2.6.23	2026-10-14	2 versions
CVE-2026-13117US	high8.1	0.40% (34th)	—	2.7.5	2026-07-30	< 2.7.5
CVE-2026-84256US	—	0.38% (32nd)	—	2.7.7	2026-09-07	< 2.7.7
CVE-2026-88964US	—	0.38% (32nd)	—	2.7.8	2026-10-13	2 versions
CVE-2026-11771US	high7.5	0.38% (31st)	—	2.7.5	2026-07-30	< 2.7.5
CVE-2026-40215US	high7.4	0.37% (31st)	—	2.7.2	2026-06-08	2 versions
CVE-2025-15497US	—	0.36% (29th)	—	2.7_rc5	2026-01-30	< 2.7_rc5
CVE-2026-84732US	—	0.34% (28th)	—	2.7.7	2026-09-07	< 2.7.7
CVE-2026-13379US	critical9.1	0.34% (27th)	—	2.7.5	2026-07-30	2 versions
CVE-2026-11604US	medium6.5	0.34% (27th)	—	no fix	2026-06-10	≤ 2.8.3
CVE-2026-81738US	—	0.33% (26th)	—	2.7.7	2026-09-07	< 2.7.7
CVE-2026-63649US	—	0.33% (26th)	—	2.7.6	2026-08-14	2 versions
CVE-2025-50054US	—	0.25% (16th)	—	2.6.14 I002	2025-06-20	5 versions
CVE-2026-63650US	—	0.23% (14th)	—	2.6.22	2026-08-14	2 versions
CVE-2025-13751US	medium5.5	0.17% (6th)	—	2.7_rc3	2025-12-03	2 versions
CVE-2026-78043US	—	0.17% (7th)	—	2.7.7	2026-09-07	< 2.7.7
CVE-2026-84790US	—	0.15% (4th)	—	2.7.8	2026-10-13	< 2.7.8
CVE-2026-84226US	—	0.14% (3rd)	—	2.7.7	2026-09-07	< 2.7.7
CVE-2026-2738US	—	0.13% (3rd)	—	2.8.2	2026-02-19	< 2.8.2
CVE-2026-78221US	—	0.12% (2nd)	—	2.7.7	2026-09-07	< 2.7.7
CVE-2026-82312US	—	0.10% (1st)	—	2.7.7	2026-09-07	< 2.7.7

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write6 CVEs
CWE-416Use After Free5 CVEs
CWE-125Out-of-bounds Read4 CVEs
CWE-121Stack-based Buffer Overflow3 CVEs
CWE-131Incorrect Calculation of Buffer Size3 CVEs
CWE-617Reachable Assertion3 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)44 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan