The Libreswan Project libreswan

• CVE-2026-77207 High 7.5 Null Pointer Dereference in PKCS#7 bundle with no certificates 0.5%
• CVE-2026-77206 High 7.5 IKEv2 pre-authentication Null Pointer Dereference in EAP code 0.7%
• CVE-2026-77205 Low 3.7 Denial of Service via sending bogus X.509 certificates 0.2%
• CVE-2026-94453 High 7.5 IKEv2 Use-After-Free bug when using IKE-over-TCP 0.5%
• CVE-2026-14957 High 7.5 FIPS mode assertion failure via malicious CERT payload 0.5%
• CVE-2026-50721 High 7.5 IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload 0.4%
• CVE-2026-50722 High 7.5 IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload 0.3%
• CVE-2026-12413 High 7.5 IKEv2 Denial of Service via malformed fragmentation 0.6%
• CVE-2020-1763 High 7.5 An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially 3.6%