Skip to content
OpenAdvisories

Product · strongSwan

strongMan

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-25998

    strongMan vulnerable to private credential recovery due to key and counter reuse

    strongMan is a management interface for strongSwan, an OpenSource IPsec-based VPN. When storing credentials in the database (private keys, EAP secrets), strongMan encrypts the corresponding database fields. So far it used AES in CTR mode with a global databas…

    strongSwan strongMan