CVE-2026-35058
NONE—CVSS v3
—CVSS v2
—
EPSS (exploit probability)
CWE-617CWE
Description
Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows authenticated attackers to trigger a fatal assertion and cause a denial of service via a specially crafted packet.
Affected routers (0)
No routers currently mapped to this CVE in our database.