NVD Vulnerability Detail
Search Exploit, PoC
CVE-2026-35058
Summary

Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows authenticated attackers to trigger a fatal assertion and cause a denial of service via a specially crafted packet.

Publication Date June 9, 2026, 5:17 a.m.
Registration Date June 10, 2026, 4:12 a.m.
Last Update June 9, 2026, 11:08 a.m.
Related information, measures and tools
Common Vulnerabilities List