CVE-2026-84790

CVSS 7.6 (high) · published 2026-10-13

OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field

Weakness: CWE-158, CWE-290

Source: NVD CVE-2026-84790

References

• https://community.openvpn.net/Security%20Announcements/CVE-2026-84790

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.