CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2026-39312
High (7.5) in softether softethervpn. EPSS 0.4% chance of exploitation in the next 30 days.
SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Program. In 5.2.5188 and earlier, a pre-authentication denial-of-service vulnerability exists in SoftEther VPN Developer Edition 5.2.5188 (and likely earlier versions of Developer Edition). An unauthenticated remote attacker can crash the vpnserver process by sending a single malformed EAP-TLS packet over raw L2TP (UDP/1701), terminating all active VPN sessions.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-11-01)
- CWE
- CWE-789
- Published
- Modified
- Record from
- the NVD, synced
Affected
- softether:softethervpn