VULNERABILITY INTELLIGENCE
CVE-2025-15497
EPSS probability0.36%
CISA KEVNot currently listed
Published2026-01-30
Last modified2026-06-17
Description
Insufficient epoch key slot processing in OpenVPN 2.7_alpha1 through 2.7_rc5 allows remote authenticated users to trigger an assert resulting in a denial of service
Weakness classification
- security@openvpn.net: CWE-617