OpenVPN OpenVPN 3 Core Library

• CVE-2026-106017 Medium 6.3 Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions. 0.2%
• CVE-2023-6247 Medium 6.5 The PKCS#7 parser in OpenVPN 3 Core Library versions through 3.8.3 did not properly validate the parsed data, which would result in the application crashing. 0.8%