CVE-2026-40215CWE-125CWE-416

CVE-2026-40215

High · published June 9, 2026

CVSS v3.1
7.4
EPSS
0%
Percentile
29.9
In the wild
Unconfirmed
What it is

A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during TLS session promotion.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00372 · 29.9th percentile
Weaknesses
CWE-125 · Out-of-bounds Read; CWE-416 · Use After Free
Published
2026-06-09T01:16Z
Affected products (2)
ProductVersionsFixed in
openvpn/openvpn≥ 2.6.0, < 2.6.202.6.20
openvpn/openvpn≥ 2.7, < 2.7.22.7.2
References (3)
https://community.openvpn.net/ReleaseHistory#openvpn-2620-released-22-april-2026 · [email protected]https://community.openvpn.net/ReleaseHistory#openvpn-272-released-22-april-2026 · [email protected]https://community.openvpn.net/Security%20Announcements/CVE-2026-40215 · [email protected]
EPSS history
Timeline
  • 08 JUN 19:59Z
    A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory…
    cvelistv5