1. Home
  2. CVE Database
  3. CVE-2026-106017
NONE · 0

CVE-2026-106017

Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions.

Vulnerability Description

Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions.

Related Weaknesses (CWE)

CWE-295

References

FAQ

What is CVE-2026-106017?

CVE-2026-106017 is a documented vulnerability. Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions.

How severe is CVE-2026-106017?

CVSS scoring is not yet available for CVE-2026-106017. Check NVD for updates.

Is there a patch for CVE-2026-106017?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.