VDB
CVE-2026-78124
CVE-2026-78124
PUBLISHED
CVSS 3.7 LOW
Reported by mitre · Published September 11, 2026
strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime.
Risk Scores
CVSS 3.1
3.7
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| strongSwan | strongSwan | 5.0.2 |
| strongswan | strongswan | 5.0.2 |
| strongSwan | strongSwan | 5.0.2 |
| wolfi | strongswan | 0, 0 |
Timeline
- Sep 10, 2026 CVE Published
- Sep 11, 2026 EPSS Score
- Sep 11, 2026 CVE Updated
- Sep 15, 2026 EPSS Score
- Sep 18, 2026 EPSS Score