CVSS 5.7 (medium) · published 2026-10-28
OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) via a race condition in the TCP connect path.
Weakness: CWE-362, CWE-672
Source: NVD CVE-2026-115402
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.