CVE-2026-106017

OpenVPN / OpenVPN 3 Core Library PUBLISHED

Description (CNA)

Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions.

Affected (CNA)

Vendor / product	Versions
OpenVPN / OpenVPN 3 Core Library	affected 3.4 through 3.11.7

CWE

CWE-295

References

https://community.openvpn.net/Security%20Announcements/CVE-2026-106017

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.