Skip to main content

OpenVPN CVE-2026-84732

| EUVDEUVD-2026-72302 HIGH
Integer Overflow or Wraparound (CWE-190)
2026-09-03 GHSA-6r5j-cp22-59fv
Integer Overflow Red Hat Suse
8.7
CVSS 4.0 · Vendor
Share

Severity by source

Vendor (CNA) PRIMARY
8.7 HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
7.5 HIGH

Pre-authentication network DoS with no confidentiality or integrity impact; no scope change as only the OpenVPN process is directly affected.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
SUSE
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Red Hat
7.5 HIGH
qualitative

Primary rating from Vendor (CNA).

CVSS VectorVendor

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

6
Metadata Corrected
Sep 07, 2026 - 09:40 vuln.today
tag: Information Disclosure removed
Metadata Corrected
Sep 07, 2026 - 09:40 vuln.today
tag: Microsoft removed
Source Code Evidence Fetched
Sep 07, 2026 - 09:26 vuln.today
Analysis Generated
Sep 07, 2026 - 09:26 vuln.today
CVE Published
Sep 03, 2026 - 18:09 github-releases
HIGH 8.7
CVE Published
Sep 03, 2026 - 18:09 github-releases
UNKNOWN (no severity yet)

Description PRE-NVD

Disclosed via GitHub release of openvpn/openvpn. NVD scoring and full description are pending.

AnalysisAI

Remote denial of service in OpenVPN's reliability layer - the custom reliable-delivery sublayer underpinning the TLS control channel - allows unauthenticated network attackers to crash or hang OpenVPN daemons on versions up to 2.7.6 and 2.6.22 by triggering an unbounded TLS retransmission timeout or forcing acknowledgment of packets that cannot be outstanding. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VA:H) confirms full availability impact with no authentication, complexity, or user-interaction requirements, and downstream VPN clients lose connectivity when the concentrator is taken offline. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation No authentication is required - the reliability layer is targeted before TLS handshake completion, making the attack fully pre-authentication. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 score of 8.7 with AV:N/AC:L/AT:N/PR:N/UI:N/VA:H accurately captures a network-reachable pre-authentication DoS requiring no authentication or special conditions - any attacker who can reach the OpenVPN port can trigger it. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Upgrade to OpenVPN v2.7.7 or later (for 2.7.x users); users on the 2.6.x branch should apply the corresponding maintenance release incorporating this fix as confirmed in the vendor advisory at https://community.openvpn.net/Security%20Announcements/CVE-2026-84732. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours, inventory all OpenVPN deployments and identify instances running versions 2.7.6 or earlier (2.x branch) or 2.6.22 or earlier across production and non-production systems. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

Same weakness CWE-190 – Integer Overflow or Wraparound

View all
CVE-2013-2729 CRITICAL POC
9.8
CVE-2015-8651 HIGH
8.8
CVE-2012-5054 HIGH POC
8.8
CVE-2014-0569 CRITICAL POC
9.3
CVE-2023-21716 CRITICAL POC
9.8
CVE-2017-3599 HIGH POC
7.5
CVE-2017-7529 HIGH
7.5
CVE-2016-1010 HIGH
8.8

Same technique Integer Overflow

View all
CVE-2014-0497 CRITICAL POC
9.8
CVE-2013-2729 CRITICAL POC
9.8
CVE-2015-8651 HIGH
8.8
CVE-2012-5054 HIGH POC
8.8
CVE-2014-0569 CRITICAL POC
9.3
CVE-2023-21716 CRITICAL POC
9.8
CVE-2017-3599 HIGH POC
7.5
CVE-2017-7529 HIGH
7.5

Vendor StatusVendor

SUSE

Severity: Important
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise High Performance Computing 12 Affected
SUSE Linux Enterprise Module for Basesystem 15 SP7 Affected
SUSE Linux Enterprise Server 15 SP7 Affected
SUSE Linux Enterprise Server 16.0 Affected

Share

CVE-2026-84732 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy