strongSwan

Products

Exploited and recent CVEs

• CVE-2026-78135 Medium 5.6 libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CHILD_SA requests are mishandled, there can be an authentication bypass. 0.4%
• CVE-2026-78134 High 7.1 strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity. 0.5%
• CVE-2026-78133 High 7.5 libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling. 0.5%
• CVE-2026-78132 High 7.5 strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax. 0.3%
• CVE-2026-78131 Low 3.7 strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser. 0.3%
• CVE-2026-78130 High 7.5 strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser. 0.3%
• CVE-2026-78129 Medium 5.9 strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption. 0.5%
• CVE-2026-78127 Low 3.7 libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser. 0.4%
• CVE-2026-78126 Medium 5.9 strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin. 0.5%
• CVE-2026-78124 Low 3.7 strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime. 0.3%
• CVE-2026-78123 Medium 5.9 strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the openssl plugin. 0.5%
• CVE-2026-47895 High 7.5 In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the dupl 0.4%
• CVE-2026-25075 High 7.5 strongSwan 4.5.0 < 6.0.5 EAP-TTLS AVP Parsing Integer Underflow 1.1%
• CVE-2026-25998 High 8.7 strongMan vulnerable to private credential recovery due to key and counter reuse 0.3%
• CVE-2025-62291 High 8.1 In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially res 1.0%
• CVE-2022-4967 High 7.7 strongSwan versions 5.9.2 through 5.9.5 are affected by authorization bypass through improper validation of certificate with host mismatch (CWE-297). When certificates are used to authenticate clients 0.5%