Veille CVE

Lundi 7 septembre 2026

3 CVE sur 9

  1. CVE-2026-84732 8.7 Élevée

    OpenVPN

    Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs that trigger a timeout integer overflow

  2. CVE-2026-84256 7.7 Élevée

    OpenVPN

    An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.7 on Windows allows remote authenticated users to execute arbitrary commands via a crafted certificate subject

  3. CVE-2026-84226 8.5 Élevée

    OpenVPN

    OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during network configuration steps