Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERT_PKCS7_WRAPPED_X509, it guards the PKCS#7 blob with SEC_PKCS7ContainsCertsOrCrls() and then iterates the certificate list with SEC_PKCS7GetCertificateList(). The two NSS APIs disagree on a SignedData that carries a CRL but no certificates: ContainsCertsOrCrls() returns PR_TRUE (there is a CRL), so the guard passes, but GetCertificateList() returns NULL (there are no certificates). This causes libreswan to dereference a null pointer leading to a crash and restart. A malicious IKE_AUTH packet can trigger this bug, meaning the peer does not need to be authenticated. No remote code execution is possible. Continued exploitation can cause a denial of service.

miracle_linux AXSA:2026-2190:04: AXSA:2026-2190:04: libreswan-4.12-2.el8_10.7

ciq crlsa-2026_89748: CRLSA-2026_89748: Important: libreswan security update

ciq crlsa-2026_89923: CRLSA-2026_89923: Important: libreswan security update

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-2176:03 advisory.

    * libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP (CVE-2026-94453)
      * libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code (CVE-2026-77206)
      * libreswan: Null Pointer Dereference in PKCS#7 bundle with no CERTS (CVE-2026-77207)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-92b72db5d7 advisory.

    Fixes CVE-2026-77205, CVE-2026-77206, CVE-2026-77207 and CVE-2026-9445

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-90492 advisory.

    - Backport fixes for CVE-2026-94453, CVE-2026-77206 and CVE-2026-77207 (RHEL-281879, RHEL-282682,     RHEL-282477)
    - Backport fix for CVE-2026-14957 (RHEL-212498)
    - Backport fixes for CVE-2026-12413, CVE-2026-50721 and CVE-2026-50722 (RHEL-190146, RHEL-190140,     RHEL-190132)
    - Fix CVE-2024-3652 (RHEL-32482)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89923 advisory.

    * libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP (CVE-2026-94453)

    * libreswan: Denial of Service via sending bogus X.509 certificates (CVE-2026-77205)

    * libreswan: Null Pointer Dereference in PKCS#7 bundle with no CERTS (CVE-2026-77207)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89748 advisory.

    * libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP (CVE-2026-94453)

    * libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code (CVE-2026-77206)

    * libreswan: Null Pointer Dereference in PKCS#7 bundle with no CERTS (CVE-2026-77207)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:89748 advisory.

    * libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP (CVE-2026-94453)
      * libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code (CVE-2026-77206)
      * libreswan: Null Pointer Dereference in PKCS#7 bundle with no CERTS (CVE-2026-77207)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:90492 advisory.

    * libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP (CVE-2026-94453)
      * libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code (CVE-2026-77206)
      * libreswan: Null Pointer Dereference in PKCS#7 bundle with no CERTS (CVE-2026-77207)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-89923 advisory.

    [5.3.3-1.0.1]
    - Add libreswan-oracle.patch to detect Oracle Linux distro

    [5.3.3-1]
    - update to 5.3.3 to fix CVE-2026-94453, CVE-2026-77207, CVE-2026-77205, and CVE-2026-77206

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89923 advisory.

    Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and     uses strong cryptography to provide both authentication and encryption services. These services allow you     to build secure tunnels through untrusted networks such as virtual private network (VPN).

    Security Fix(es):

    * libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP (CVE-2026-94453)

    * libreswan: Denial of Service via sending bogus X.509 certificates (CVE-2026-77205)

    * libreswan: Null Pointer Dereference in PKCS#7 bundle with no CERTS (CVE-2026-77207)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-89748 advisory.

    [4.15-11.0.1]
    - Add libreswan-oracle.patch to detect Oracle Linux distro

    [4.15-11]
    - Backport fixes for CVE-2026-94453, CVE-2026-77206, and CVE-2026-77207 (RHEL-281889, RHEL-281998,     RHEL-281985)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:89748 advisory.

    Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and     uses strong cryptography to provide both authentication and encryption services. These services allow you     to build secure tunnels through untrusted networks such as virtual private network (VPN).

    Security Fix(es):

    * libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP (CVE-2026-94453)

    * libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code (CVE-2026-77206)

    * libreswan: Null Pointer Dereference in PKCS#7 bundle with no CERTS (CVE-2026-77207)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3253 advisory.

    A null pointer dereference flaw was found in Libreswan's PKCS#7 certificate payload handling. When     processing a crafted IKEv2 IKE_AUTH packet containing a PKCS#7 bundle with a certificate revocation list     but no certificates, Libreswan may dereference a null pointer, causing the pluto daemon to crash and     restart. A remote, unauthenticated attacker could repeatedly trigger this flaw to cause a denial of     service. (CVE-2026-77207)

    A use-after-free flaw was found in Libreswan's IKE-over-TCP handling. When a TCP connection closes and     additional packet processing occurs for the same connection tuple, the IKE daemon may access a previously     freed interface endpoint object. A remote, unauthenticated attacker may exploit this flaw to cause the     pluto daemon to crash and restart, resulting in denial of service. (CVE-2026-94453)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of libreswan installed on the remote host is prior to 3.25-4.8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4021 advisory.

    A null pointer dereference flaw was found in Libreswan's PKCS#7 certificate payload handling. When     processing a crafted IKEv2 IKE_AUTH packet containing a PKCS#7 bundle with a certificate revocation list     but no certificates, Libreswan may dereference a null pointer, causing the pluto daemon to crash and     restart. A remote, unauthenticated attacker could repeatedly trigger this flaw to cause a denial of     service. (CVE-2026-77207)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate     authentication. When libreswan decodes an IKE CERT payload of type CERT_PKCS7_WRAPPED_X509, it guards the     PKCS#7 blob with SEC_PKCS7ContainsCertsOrCrls() and then iterates the certificate list with     SEC_PKCS7GetCertificateList(). The two NSS APIs disagree on a SignedData that carries a CRL but no     certificates: ContainsCertsOrCrls() returns PR_TRUE (there is a CRL), so the guard passes, but     GetCertificateList() returns NULL (there are no certificates). This causes libreswan to dereference a null     pointer leading to a crash and restart. A malicious IKE_AUTH packet can trigger this bug, meaning the peer     does not need to be authenticated. No remote code execution is possible. Continued exploitation can cause     a denial of service. (CVE-2026-77207)

Note that Nessus relies on the presence of the package as reported by the vendor.

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792158739 advisory.

  - Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate     authentication. When libreswan decodes an IKE CERT payload of type CERT_PKCS7_WRAPPED_X509, it guards the     PKCS#7 blob with SEC_PKCS7ContainsCertsOrCrls() and then iterates the certificate list with     SEC_PKCS7GetCertificateList(). The two NSS APIs disagree on a SignedData that carries a CRL but no     certificates: ContainsCertsOrCrls() returns PR_TRUE (there is a CRL), so the guard passes, but     GetCertificateList() returns NULL (there are no certificates). This causes libreswan to dereference a null     pointer leading to a crash and restart. A malicious IKE_AUTH packet can trigger this bug, meaning the peer     does not need to be authenticated. No remote code execution is possible. Continued exploitation can cause     a denial of service. (CVE-2026-77207)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Libreswan, via the function RSA_authenticate_hash_signature_pkcs1_1_5_rsa(), did not correctly verify the
    DER encoding of the ASN.1 digest when the IKEv2 AUTH payload was encoded using RSASSA-PKCS1-v1_5 (RFC
    8017). A remote attacker can use a variation on the Bleichenbacher attack to forge the AUTH payload when
    small public exponents are used (e.g., e=3), leading to impersonation. Additionally, a remote attacker, by
    encoding a shorter than expected hash in the AUTH payload, could trigger an assertion leading to denial-
    of-service. The daemon aborts and restarts; continued exploitation causes sustained denial of service.
    Remote code execution is not possible. X.509 certificate verifications of the remote IKE peer are not
    affected. (CVE-2026-50722)

  - An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued
    exploitation would cause a denial of service. The function reassemble_v2_incoming_fragments() would ignore
    unknown outer payloads but still store these in a fixed size array msg_digest.digest[PAYLIMIT]. An off-by-
    one error in the assertion PASSERT(logger, md->digest_roof < elemsof(md->digest)) causes the daemon to
    abort. No remote code execution is possible. Any configuration that allows IKEv2 connections that do not
    set fragmentation=no are vulnerable. IKEv1 is not affected. (CVE-2026-12413)

  - In FIPS mode, Libreswan's add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts that the
    result is not NULL. However, CERT_ExtractPublicKey() returns NULL when public key extraction fails, for
    example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate in a
    CERT payload to trigger the assertion, causing the pluto daemon to abort and restart. Continued
    exploitation causes a denial of service. No remote code execution is possible. Both IKEv1 and IKEv2 are
    affected. The vulnerability is only exploitable when both the OS and libreswan are running in FIPS mode
    and at least one CA certificate is loaded. The CERT payload is processed before peer authentication, so no
    credentials are needed to exploit this. Configurations using only PreSharedKey (PSK) authentication with
    no CA certificates loaded in the NSS database are not vulnerable. (CVE-2026-14957)

  - Libreswan, via the function RSA_authenticate_hash_signature_raw_rsa(), did not correctly verify the length
    of the authentication hash when the SIG payload of an IKEv1 packet was encoded using PKCS #1 RSA
    Encryption as per RFC 2313. A remote attacker can use a variation on the Bleichenbacher attack to forge
    the SIG payload when small public exponents are being used (e.g., e=3), which could lead to impersonation.
    Additionally, a remote attacker, by encoding a shorter than expected hash in the SIG payload, could
    trigger an assertion leading to denial-of-service. The daemon aborts and restarts; continued exploitation
    causes sustained denial of service. Remote code execution is not possible. X.509 certificate verifications
    of remote IKE peers are not affected. (CVE-2026-50721)

ID	Name	Product	Family	Type	Severity
372916	MiracleLinux 9 : libreswan-4.15-11.el9_8 (AXSA:2026-2176:03)	Nessus	Miracle Linux Local Security Checks	Local	high
372895	Fedora 43 : libreswan (2026-92b72db5d7)	Nessus	Fedora Local Security Checks	Local	medium
372477	Oracle Linux 8 : libreswan (ELSA-2026-90492)	Nessus	Oracle Linux Local Security Checks	Local	high
372446	RockyLinux 10 : libreswan (RLSA-2026:89923)	Nessus	Rocky Linux Local Security Checks	Local	high
372425	RockyLinux 9 : libreswan (RLSA-2026:89748)	Nessus	Rocky Linux Local Security Checks	Local	high
372208	AlmaLinux 9 : libreswan (ALSA-2026:89748)	Nessus	Alma Linux Local Security Checks	Local	high
372205	AlmaLinux 8 : libreswan (ALSA-2026:90492)	Nessus	Alma Linux Local Security Checks	Local	high
372188	Oracle Linux 10 : libreswan (ELSA-2026-89923)	Nessus	Oracle Linux Local Security Checks	Local	high
372146	RHEL 10 : libreswan (RHSA-2026:89923)	Nessus	Red Hat Local Security Checks	Local	high
372062	Oracle Linux 9 : libreswan (ELSA-2026-89748)	Nessus	Oracle Linux Local Security Checks	Local	high
371999	RHEL 9 : libreswan (RHSA-2026:89748)	Nessus	Red Hat Local Security Checks	Local	high
371857	Amazon Linux 2023 : libreswan (ALAS2023-2026-3253)	Nessus	Amazon Linux Local Security Checks	Local	high
371784	Amazon Linux 2 : libreswan (ALAS-2026-4021)	Nessus	Amazon Linux Local Security Checks	Local	high
369154	Linux Distros Unpatched Vulnerability : CVE-2026-77207	Nessus	Misc.	Local	high
366645	AlmaLinux 9.2 [TuxCare] Security Update: libreswan (ALMALINUX9.2:CLSA-2026:1792158739)	Nessus	Alma Linux Local Security Checks	Local	high
473834	Alpine: multiple libreswan packages: security update to 5.3.3-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	medium
473834	Alpine: multiple libreswan packages: security update to 5.3.3-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	medium

Detections

Analytics

CVE-2026-77207

high

Tenable Plugins

Coming Soon

high

medium

high

high

high

high

high

high

high

high

high

high

high

high

high

medium

medium