CVE-2026-81738

OpenVPN / OpenVPN PUBLISHED

Description (CNA)

OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries

Affected (CNA)

Vendor / product	Versions
OpenVPN / OpenVPN	affected 2.5.0 through 2.7.6

CWE

CWE-121, CWE-193, CWE-787

References

https://community.openvpn.net/Security%20Announcements/CVE-2026-81738

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.