Vendor

OpenVPN

62 known vulnerabilities.

Products

OpenVPN 38 ovpn-dco-win 6 OpenVPN Connect 5 Access Server 4 OpenVPN-GUI 3 OpenVPN 2 2 OpenVPN 3 Core Library 2 OpenVPN 2 (Community) 2 ovpn-dco 1 tap-windows6 1 Easy-RSA 1 OpenVPN 3 Linux 1

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Critical 9.1

CVE-2025-12106

Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over…

OpenVPN OpenVPN

Dec 1, 2025
Critical 9.1

CVE-2024-5594

OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker controlling the server can use to…

OpenVPN OpenVPN openvpn openvpn Debian Ubuntu Alpine

Jan 6, 2025
Critical 9.8

CVE-2024-1305 EPSS 15%

tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which …

OpenVPN OpenVPN-GUI tap-windows6

Jul 8, 2024