VULNERABILITY INTELLIGENCE

CVE-2026-84256

CVSS score7.7 HIGH

EPSS probability0.38%

CISA KEVNot currently listed

Published2026-09-07

Last modified2026-10-13

Description

An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.7 on Windows allows remote authenticated users to execute arbitrary commands via a crafted certificate subject