CVE-2026-115402

Vulnerability Description

OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) via a race condition in the TCP connect path.

Related Weaknesses (CWE)

CWE-362 CWE-672

References

https://community.openvpn.net/Security%20Announcements/CVE-2026-115402

FAQ

What is CVE-2026-115402?

CVE-2026-115402 is a documented vulnerability. OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) via a race condition in the TCP connect path.

How severe is CVE-2026-115402?

CVSS scoring is not yet available for CVE-2026-115402. Check NVD for updates.

Is there a patch for CVE-2026-115402?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.