VULNERABILITY INTELLIGENCE

CVE-2025-11955

EPSS probability0.21%
CISA KEVNot currently listed
Published2025-10-27
Last modified2026-10-08

Description

Incorrect validation of OCSP certificates vulnerability in TheGreenBow VPN, versions 7.5 and 7.6. During the IKEv2 authentication step, the OCSP-enabled VPN client establishes the tunnel even if it does not receive an OCSP response or if the OCSP response signature is invalid.

Weakness classification

  • cve-coordination@incibe.es: CWE-299

Primary references