https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-08T19:41:09.436133+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-35058 CVE-2026-35058 2026-10-08T19:41:09.641713+00:00

Affected: OpenVPN

Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows authenticated attackers to trigger a fatal assertion and cause a denial of service via a specially crafted packet.

 https://vulnerability.circl.lu/vuln/usn-8286-1 USN-8286-1 — openvpn vulnerabilities 2026-10-08T19:41:09.641833+00:00

Affected: Ubuntu:22.04:LTS: openvpn, Ubuntu:24.04:LTS: openvpn, Ubuntu:25.10: openvpn, Ubuntu:26.04:LTS: openvpn

Guannan Wang, Zhanpeng Liu, Guancheng Li, and Emma Reuter discovered that OpenVPN incorrectly handled suitably malformed packets with valid tls-crypt-v2 keys. An attacker could possibly use this issue to cause OpenVPN to crash, resulting in a denial of service. (CVE-2026-35058)

Guannan Wang, Zhanpeng Liu, and Guancheng Li discovered that OpenVPN had a race condition in the TLS handshake process that could leak packet data from a previous handshake under certain circumstances. An attacker could possibly use this issue to obtain sensitive information. (CVE-2026-40215)