The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8540-1 advisory.

    It was discovered that OpenVPN had a 1-byte buffer overrun when handling NTLMv2 proxy responses. An     attacker could use this issue to cause a denial of service or possibly execute arbitrary code. This issue     only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-11771)

    It was discovered that OpenVPN incorrectly handled metadata when extracting tls-crypt-v2 client keys. An     attacker could possibly use this issue to obtain sensitive information. (CVE-2026-12932)

    It was discovered that OpenVPN had a use-after-free in the ack_write_buf handling. An attacker could use     this issue to cause OpenVPN to crash, resulting in a denial of service, or possibly execute arbitrary     code. (CVE-2026-12996)

    It was discovered that OpenVPN had a use-after-free in the tls_wrap_reneg handling. An attacker could use     this issue to cause OpenVPN to crash, resulting in a denial of service, or possibly execute arbitrary     code. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-13117)

    It was discovered that OpenVPN incorrectly validated authentication tokens when external authentication     was enabled. A remote attacker could possibly use this issue to cause OpenVPN to crash, resulting in a     denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-13122)

    It was discovered that OpenVPN had a memory leak when handling tls-crypt-v2 client keys. A remote attacker     with a valid tls-crypt-v2 client key could possibly use this issue to cause OpenVPN to consume excessive     resources, leading to a denial of service. (CVE-2026-13698)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenVPN vulnerabilities (USN-8540-1)

high Nessus Plugin ID 326999

Version 1.2

Version 1.1

Version 1.2 Aug 3, 2026, 1:05 PM CVSS metrics ("Cvssv4 score" set to 7.1) CVSS metrics ("Cvssv4 vector" set to "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N") CVSSv4 severity (based on CVE-2026-12932, severity increased from "Medium" to "High") Plugin Feed: 202608031305
Version 1.1 Jul 15, 2026, 11:41 PM New Plugin Feed: 202607152341