Medium severityNVD Advisory· Published Feb 19, 2026· Updated Jun 17, 2026

CVE-2026-2738

Description

Buffer overflow in ovpn‑dco‑win version 2.8.0 allows local attackers to cause a system crash by sending too large packets to the remote peer when the AEAD tag appears at the end of the encrypted packet

Affected products

OpenVPN/Ovpn Dco Winllm-fuzzy
Range: =2.8.0

Patches

Vulnerability mechanics

References

community.openvpn.net/Security%20Announcements/CVE-2026-2738nvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000