https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T06:37:02.252257+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/certfr-2026-avi-0709 certfr-2026-avi-0709 — Une vulnérabilité a été découverte dans strongSwan. Elle permet à un attaquant de provoquer une exécution de code arbit… 2026-09-30T06:37:02.265657+00:00 certfr-2026-avi-0709 https://vulnerability.circl.lu/vuln/fkie_cve-2026-47895 fkie_cve-2026-47895 2026-09-30T06:37:02.265731+00:00

In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed.

 https://vulnerability.circl.lu/vuln/ghsa-55p5-7gvc-767j GHSA-55p5-7gvc-767j 2026-09-30T06:37:02.265788+00:00

In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed.

 https://vulnerability.circl.lu/vuln/msrc_cve-2026-47895 msrc_CVE-2026-47895 — In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but n… 2026-09-30T06:37:02.265817+00:00 msrc_CVE-2026-47895 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11005-1 openSUSE-SU-2026:11005-1 — strongswan-6.0.7-1.1 on GA media 2026-09-30T06:37:02.265849+00:00

strongswan-6.0.7-1.1 on GA media

 https://vulnerability.circl.lu/vuln/suse-su-2026:22168-1 SUSE-SU-2026:22168-1 — Security update for strongswan 2026-09-30T06:37:02.265877+00:00

Security update for strongswan

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-47895 UBUNTU-CVE-2026-47895 2026-09-30T06:37:02.265899+00:00

Affected: Ubuntu:Pro:14.04:LTS: strongswan, Ubuntu:Pro:16.04:LTS: strongswan, Ubuntu:Pro:FIPS:16.04:LTS: strongswan, Ubuntu:Pro:18.04:LTS: strongswan, Ubuntu:Pro:FIPS-updates:18.04:LTS: strongswan, Ubuntu:Pro:FIPS:18.04:LTS: strongswan, Ubuntu:20.04:LTS: strongswan, Ubuntu:Pro:FIPS-updates:20.04:LTS: strongswan, Ubuntu:Pro:FIPS:20.04:LTS: strongswan, Ubuntu:22.04:LTS: strongswan and 5 more

In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed.

 https://vulnerability.circl.lu/vuln/wid-sec-w-2026-1832 WID-SEC-W-2026-1832 — strongSwan: Schwachstelle ermöglicht Codeausführung 2026-09-30T06:37:02.265971+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in strongSwan ausnutzen, um beliebigen Programmcode auszuführen.