VULNERABILITY INTELLIGENCE

CVE-2026-82312

CVSS score1.8 LOW
EPSS probability0.10%
CISA KEVNot currently listed
Published2026-09-07
Last modified2026-09-08
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:H

Description

OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC objects

Weakness classification

  • CWE-412: Unrestricted Externally Accessible Lock
  • CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references