VULNERABILITY INTELLIGENCE
CVE-2026-81738
CVSS score2.3 LOW
EPSS probability0.33%
CISA KEVNot currently listed
Published2026-09-07
Last modified2026-09-08
CVSS vectorCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L
Description
OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries
Weakness classification
- CWE-121: Stack-based Buffer Overflow
- CWE-193: Off-by-one Error
- CWE-787: Out-of-bounds Write