CVE-2026-2738

OpenVPN / ovpn-dco-win PUBLISHED

Description (CNA)

Buffer overflow in ovpn‑dco‑win version 2.8.0 allows local attackers to cause a system crash by sending too large packets to the remote peer when the AEAD tag appears at the end of the encrypted packet

Affected (CNA)

Vendor / product	Versions
OpenVPN / ovpn-dco-win	affected 2.8.0

CWE

CWE-131

References

https://community.openvpn.net/Security%20Announcements/CVE-2026-2738

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.