It was discovered that OpenVPN incorrectly handled certificate subject fields. A remote authenticated user could possibly use this issue to impersonate other users.

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

USN-8953-1: OpenVPN vulnerability

VERWANDTEARTIKEL

CVE-2026-114611 - OCO-Server: MDM /profile endpoint accepts self-signed PKCS#7 signatures (PKCS7_NOVERIFY): device MDM identity (certificate + private key) disclosure and device-record hijack

CVE-2026-97631 - Pre-boot RCE in EDK II PXE driver

CVE-2026-115513 - OpenCATS before 0.12.0 Stored XSS via MRU Navigation Panel

CVE-2026-114607 - better-auth: OAuth state can be used as a Magic Link to sign in as another user

CVE-2026-104068 - JetBackup WordPress Plugin < 3.1.24.10 Symlink Arbitrary File Write via Backup Restore

CVE-2026-94482 - Next.js: Denial of Service in App Router using Server Actions