medium6.3
CVE-2026-106017
Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions.
Impact
Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| OpenVPN | OpenVPN 3 Core Library Version 3.4 | through 3.11.7 |
Versions were read from the advisory text. No structured product data has been published for this record yet.