strongswan vulnerabilities
18 published CVEs name strongswan among the affected products.
- 18Published CVEs18 of them scored
- 15Last 12 monthspublished in the last year
- 0Critical9 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-78135
libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CHILD_SA requests are mishandled, there…
strongSwan · strongSwan
Medium5.6 - CVE-2026-78134
strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP…
strongSwan · strongSwan
High7.1 - CVE-2026-78133
libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling.
strongSwan · strongSwan
High7.5 - CVE-2026-78132
strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax.
strongSwan · strongSwan
High7.5 - CVE-2026-78131
strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser.
strongSwan · strongSwan
Low3.7 - CVE-2026-78130
strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser.
strongSwan · strongSwan
High7.5 - CVE-2026-78129
strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption.
strongSwan · strongSwan
Medium5.9 - CVE-2026-78127
libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser.
strongSwan · strongSwan
Low3.7 - CVE-2026-78126
strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin.
strongSwan · strongSwan
Medium5.9 - CVE-2026-78124
strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective…
strongSwan · strongSwan
Low3.7