VULNERABILITY INTELLIGENCE

CVE-2026-13698

CVSS score6 MEDIUM
EPSS probability0.55%
CISA KEVNot currently listed
Published2026-07-06
Last modified2026-07-09
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Description

A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers with a valid tls-crypt-v2 client key to potentially cause a denial of service

Weakness classification

  • CWE-401: Missing Release of Memory after Effective Lifetime
  • CWE-770: Allocation of Resources Without Limits or Throttling

Primary references