critical9.1
CVE-2026-13379
The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a cr…
Impact
The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a crafted search domain during the disconnection process
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openvpn | Openvpn | from 2.7 before 2.7.5 |