Detections
Analytics
OpenVPN 2.6.0 < 2.6.21 / 2.7.x < 2.7.5 Multiple Vulnerabilities
medium Nessus Plugin ID 325894
Language:
Synopsis
An application on the remote Windows host is affected by multiple vulnerabilities.Description
According to its self-reported version number, the version of OpenVPN installed on the remote Windows host is affected by multiple vulnerabilities:- A use-after-free bug in ack_write_buf(), triggerable by a well-timed sequence of control channel and authentication packets. (CVE-2026-12996)
- A use-after-free bug in tls_wrap_reneg(), triggerable by a suitable sequence of dynamic tls-crypt control-channel packets. (CVE-2026-13117)
- A possible 1-byte buffer overrun on NTLMv2 proxy responses. (CVE-2026-11771)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Upgrade to OpenVPN 2.6.21, 2.7.5, or later.See Also
Plugin Details
Severity: Medium
ID: 325894
File Name: openvpn_2_6_21.nasl
Version: 1.3
Type: Local
Agent: windows
Family: Windows
Published: 7/9/2026
Updated: 7/15/2026
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.3
Percentile: 96.71
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS Score Source: CVE-2026-12996
CVSS v3
Risk Factor: Critical
Base Score: 9.1
Temporal Score: 7.9
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS v4
Risk Factor: Medium
Base Score: 5.9
Threat Score: 2
Threat Vector: CVSS:4.0/E:U
Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS Score Source: CVE-2026-13122
Vulnerability Information
CPE: cpe:/a:openvpn:openvpn
Required KB Items: installed_sw/OpenVPN Server
Exploit Ease: No known exploits are available
Patch Publication Date: 7/2/2026
Vulnerability Publication Date: 7/2/2026
Reference Information
CVE: CVE-2026-11771, CVE-2026-12932, CVE-2026-12996, CVE-2026-13117, CVE-2026-13122
IAVA: 2026-A-0662