Search CVE reports


Toggle filters

711 – 720 of 47985 results

Status is adjusted based on your filters.


CVE-2026-78134

Medium priority
Needs evaluation

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity.

1 affected package

strongswan

Package 20.04 LTS
strongswan Needs evaluation
Show less packages

CVE-2026-78133

Medium priority
Not affected

libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling.

1 affected package

strongswan

Package 20.04 LTS
strongswan Not affected
Show less packages

CVE-2026-78132

Medium priority
Needs evaluation

strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax.

1 affected package

strongswan

Package 20.04 LTS
strongswan Needs evaluation
Show less packages

CVE-2026-78131

Medium priority
Needs evaluation

strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser.

1 affected package

strongswan

Package 20.04 LTS
strongswan Needs evaluation
Show less packages

CVE-2026-78130

Medium priority
Needs evaluation

strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser.

1 affected package

strongswan

Package 20.04 LTS
strongswan Needs evaluation
Show less packages

CVE-2026-78129

Medium priority
Needs evaluation

strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption.

1 affected package

strongswan

Package 20.04 LTS
strongswan Needs evaluation
Show less packages

CVE-2026-78127

Medium priority
Needs evaluation

libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser.

1 affected package

strongswan

Package 20.04 LTS
strongswan Needs evaluation
Show less packages

CVE-2026-78126

Medium priority
Needs evaluation

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin.

1 affected package

strongswan

Package 20.04 LTS
strongswan Needs evaluation
Show less packages

CVE-2026-78124

Medium priority
Needs evaluation

strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime.

1 affected package

strongswan

Package 20.04 LTS
strongswan Needs evaluation
Show less packages

CVE-2026-78123

Medium priority
Needs evaluation

strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the openssl plugin.

1 affected package

strongswan

Package 20.04 LTS
strongswan Needs evaluation
Show less packages