Detections
Analytics
OpenVPN 2.6.x < 2.6.20 / 2.7.x < 2.7.2 TLS Race Condition
medium Nessus Plugin ID 324955
Synopsis
An application installed on the remote host is affected by a vulnerability.Description
According to its self-reported version number, the version of OpenVPN installed on the remote host is affected by a vulnerability:- A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during TLS session promotion. (CVE-2026-40215)
Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
Solution
Upgrade to OpenVPN 2.6.20, 2.7.2, or later.See Also
http://www.nessus.org/u?0dbd9e04
Plugin Details
Severity: Medium
ID: 324955
File Name: openvpn_2_6_20.nasl
Version: 1.2
Type: Local
Agent: windows
Family: Windows
Published: 7/3/2026
Updated: 7/6/2026
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3
Percentile: 23.71
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.2
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS Score Source: CVE-2026-40215
CVSS v3
Risk Factor: Medium
Base Score: 5.9
Temporal Score: 5.2
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS v4
Risk Factor: Medium
Base Score: 6.1
Threat Score: 2.4
Threat Vector: CVSS:4.0/E:U
Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:L/SI:N/SA:L
Vulnerability Information
CPE: cpe:/a:openvpn:openvpn
Required KB Items: installed_sw/OpenVPN Server
Exploit Ease: No known exploits are available
Patch Publication Date: 4/22/2026
Vulnerability Publication Date: 6/8/2026
Reference Information
CVE: CVE-2026-40215
IAVA: 2026-A-0640