CVE-2025-12106
Critical · CVSS 9.1- CVSS
- 9.1
- nvd
- EPSS
- —
- KEV
- No
- Class
- oss containerizable
- CWE-126
Description
Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses
References
Status: profiled · ingested 2026-09-26T06:00:02.000Z