CVE-2026-16348 - An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with

CVE-2026-74727 - In the Linux kernel, the following vulnerability has been resolved: ovpn: skip rehash for peers alr

CVE-2026-49360 - Recce is a data-validation toolkit for enhanced dbt (data build tool) PR review. Prior to version 1.

CVE-2026-19586 - A pre-authentication OS command injection vulnerability has been identified in Omada gateways config

CVE-2026-73973 - Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems.

CVE-2026-63650 - OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified

CVE-2026-63649 - The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7_alpha1 through 2.7.5 allows

CVE-2026-72841 - luci-app-openvpn fails to properly validate the instance_name2 parameter during file upload, allowin

CVE-2026-0296 - Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an u

CVE-2026-20349 - A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security App

CVE-2026-68342 - In the Linux kernel, the following vulnerability has been resolved: ovpn: avoid putting unrelated P

CVE-2026-68341 - In the Linux kernel, the following vulnerability has been resolved: ovpn: fix use after free in unl

CVE-2026-68122 - In the Linux kernel, the following vulnerability has been resolved: ovpn: fix peer refcount leak in

CVE-2026-71993 - MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the

CVE-2026-66151 - SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel

CVE-2026-14818 - A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP s

CVE-2026-18602 - A vulnerability was determined in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function ovpn-clien

CVE-2026-18601 - A vulnerability was found in GL.iNet GL-MT3000 up to 4.4.5. This impacts the function ovpn-client.ch

CVE-2026-9044 - An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vul

CVE-2026-13379 - The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause

CVE-2026-13117 - An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authe

CVE-2026-12996 - A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenti

CVE-2026-12932 - A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7_alph

CVE-2026-11771 - OpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attackers via an off-by-one

CVE-2026-67245 - A path traversal vulnerability was found in the VPN Clients on the ADM. The vulnerability occurs bec

CVE-2026-49258 - Nebula Mesh is a self-hosted control plane for the Slack Nebula mesh VPN. In versions 0.3.5 and belo

CVE-2026-64045 - In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - use cached peer poi

CVE-2026-64044 - In the Linux kernel, the following vulnerability has been resolved: ovpn: respect peer refcount in

CVE-2026-64043 - In the Linux kernel, the following vulnerability has been resolved: ovpn: fix race between deleting

CVE-2026-8616 - The Fense Proxy & VPN Blocker plugin for WordPress is vulnerable to unauthorized modification of dat

CVE-2026-63089 - WireGuard Easy through 15.3.0, fixed in commit 66b292b, contains a cryptographically weak one-time l

CVE-2026-57399 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i