Vulnerability Details CVE-2026-35058
Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows authenticated attackers to trigger a fatal assertion and cause a denial of service via a specially crafted packet.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 26.5%
CVSS Severity
CVSS v3 Score 6.5
References
- https://community.openvpn.net/ReleaseHistory#openvpn-2620-released-22-april-2026
- https://community.openvpn.net/ReleaseHistory#openvpn-272-released-22-april-2026
- https://community.openvpn.net/Security%20Announcements/CVE-2026-35058
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2026-2381
Products affected by CVE-2026-35058
-
cpe:2.3:a:openvpn:openvpn:2.6.0
-
cpe:2.3:a:openvpn:openvpn:2.6.1
-
cpe:2.3:a:openvpn:openvpn:2.6.10
-
cpe:2.3:a:openvpn:openvpn:2.6.11
-
cpe:2.3:a:openvpn:openvpn:2.6.12
-
cpe:2.3:a:openvpn:openvpn:2.6.13
-
cpe:2.3:a:openvpn:openvpn:2.6.14
-
cpe:2.3:a:openvpn:openvpn:2.6.15
-
cpe:2.3:a:openvpn:openvpn:2.6.16
-
cpe:2.3:a:openvpn:openvpn:2.6.17
-
cpe:2.3:a:openvpn:openvpn:2.6.18
-
cpe:2.3:a:openvpn:openvpn:2.6.19
-
cpe:2.3:a:openvpn:openvpn:2.6.2
-
cpe:2.3:a:openvpn:openvpn:2.6.3
-
cpe:2.3:a:openvpn:openvpn:2.6.4
-
cpe:2.3:a:openvpn:openvpn:2.6.5
-
cpe:2.3:a:openvpn:openvpn:2.6.6
-
cpe:2.3:a:openvpn:openvpn:2.6.7
-
cpe:2.3:a:openvpn:openvpn:2.6.8
-
cpe:2.3:a:openvpn:openvpn:2.6.9
-
cpe:2.3:a:openvpn:openvpn:2.7
-
cpe:2.3:a:openvpn:openvpn:2.7.0
-
cpe:2.3:a:openvpn:openvpn:2.7.1