Vulnerability Details CVE-2026-78135
libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CHILD_SA requests are mishandled, there can be an authentication bypass.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 26.8%
CVSS Severity
CVSS v3 Score 5.6