CVE-2025-11955
HIGH—CVSS v3
—CVSS v2
0.21%
EPSS (exploit probability)
CWE-299CWE
Description
Incorrect validation of OCSP certificates vulnerability in TheGreenBow VPN, versions 7.5 and 7.6. During the IKEv2 authentication step, the OCSP-enabled VPN client establishes the tunnel even if it does not receive an OCSP response or if the OCSP response signature is invalid.
Affected routers (0)
No routers currently mapped to this CVE in our database.