CVSS 4.0
7.0 highCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:HCVE-2026-11771
High (7.0) in openvpn openvpn. EPSS 0.4% chance of exploitation in the next 30 days.
OpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attackers via an off-by-one buffer write in the NTLM proxy authentication to potentially cause a crash via a crafted NTLM response from a malicious proxy server
Severity
CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-121, CWE-193, CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- openvpn:openvpn