Skip to main content

strongSwan CVE-2026-35334

MEDIUM
N/A vendor:alpine
Share

Lifecycle Timeline

1
Analysis Generated
May 27, 2026 - 23:04 vuln.today

DescriptionCVE.org

Alpine Linux: strongswan fixed in 6.0.6-r0

AnalysisAI

strongSwan, an open-source IPsec VPN implementation widely deployed for site-to-site and remote-access VPN, contains a vulnerability addressed in Alpine Linux package version 6.0.6-r0. The nature of the vulnerability - its impact, attack vector, and affected component - is not disclosed in the available intelligence. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Access IKE service (UDP 500/4500)
Exploit
Send crafted VPN negotiation packet
Execution
Trigger unknown vulnerability in strongSwan
Impact
Achieve unknown impact (crash, bypass, or execution)

Vulnerability AssessmentAI

Exploitation Exploitation conditions cannot be determined - no CVSS vector, CWE, or technical description of the vulnerability is available. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment Risk cannot be meaningfully assessed from the available data. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Without knowledge of the vulnerability class, a precise scenario cannot be constructed. As a hypothetical consistent with common strongSwan vulnerability patterns: a remote attacker targeting an exposed IKE port sends a crafted IKEv2 negotiation packet to trigger the underlying flaw, potentially causing a daemon crash or unauthorized access. …
Remediation Upgrade the Alpine Linux strongSwan package to version 6.0.6-r0 or later by running the standard Alpine package manager update: 'apk upgrade strongswan'. … Detailed patch versions, workarounds, and compensating controls in full report.

Threat intelligence, references, and detailed analysis are available after sign-in.

Share

CVE-2026-35334 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy