CVEFinder.io

CVE-2026-13379

⛔ critical
🔍 Scan for this CVE
Summary

The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a crafted search domain during the disconnection process

CVSS Score
9.1
Critical
EPSS Score
0.3
Exploit Probability
Published Date
2026-07-30
First Seen: 2026-07-31
📊 Relative Risk Intelligence

This CVE is High Risk - more severe than 87.6% of all 349,016 vulnerabilities in our database.

#43,400
Top 25% most severe
Severity Percentile
🎯 CISA SSVC Assessment Updated: Jul 30, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Partial
Limited system impact
SSVC data provided by CISA
Last Modified 2026-08-05
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS Vector 4.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:L/VI:N/VA:L/SC:H/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE IDs (Weakness Types)
CWE-125 CWE-142

📦 Affected Products 1

Vendor Product Status Affected Versions
openvpn openvpn Affected
> 2.7 < 2.7.5

🔗 References 2

https://community.openvpn.net/ReleaseHistory#openvpn...
Release Notes
https://community.openvpn.net/Security%20Announcemen...
Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-11771 ⚠️ high 7.5 0.4 OpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attackers via an off-by-one buffer write in the... 2026-07-30
CVE-2026-12932 ⚠️ high 8.1 0.4 A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 all... 2026-07-30
CVE-2026-12996 ⚠️ high 8.1 0.5 A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to poten... 2026-07-30
CVE-2026-13117 ⚠️ high 8.1 0.4 An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to tr... 2026-07-30
CVE-2026-13698 ⚠️ high 7.5 0.6 A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote a... 2026-07-06
CVE-2026-13122 🔶 medium 5.3 0.5 OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service v... 2026-07-06
These CVEs affect the same products