High severityNVD Advisory· Published Oct 27, 2025· Updated Apr 15, 2026

CVE-2025-11955

Description

Incorrect validation of OCSP certificates vulnerability in TheGreenBow VPN, versions 7.5 and 7.6. During the IKEv2 authentication step, the OCSP-enabled VPN client establishes the tunnel even if it does not receive an OCSP response or if the OCSP response signature is invalid.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Hola/VPNllm-fuzzy
Range: =7.5, =7.6

Patches

Vulnerability mechanics

References

www.incibe.es/en/incibe-cert/notices/aviso/incorrect-validation-ocsp-certificates-thegreenbow-vpn-client-windowsnvd
www.thegreenbow.com/en/support/security-alerts/nvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000