medium5.6
CVE-2026-78135
libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine.
Impact
libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CHILD_SA requests are mishandled, there can be an authentication bypass.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Strongswan | Strongswan | from 5.9.7 through 6.0.7 |