low2.0
CVE-2026-63650
OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup …
Impact
OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| OpenVPN | OpenVPN 2.7 Alpha1 | through 2.7.5 |
Versions were read from the advisory text. No structured product data has been published for this record yet.