← All advisories

Medium severity5.9NVD Advisory· Published Sep 11, 2026· Updated Sep 14, 2026

CVE-2026-78126

CVE-2026-78126

Description

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Strongswan/Strongswanreferences3 versions
(expand)+ 2 more
- (no CPE)
- cpe:2.3:a:strongswan:strongswan:*:*:*:*:*:*:*:*range: >=4.1.10,<6.1.0
- (no CPE)range: 4.1.10 - 6.0.7
osv-coords
pkg:rpm/opensuse/strongswan&distro=openSUSE%20Tumbleweed
Range: < 6.1.0-1.1

Patches

Vulnerability mechanics

References

2

github.com/strongswan/strongswan/releases/tag/6.1.0nvdPatchRelease NotesVendor Advisory
www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78126).htmlnvdMitigationVendor Advisory

News mentions

0

No linked articles in our index yet.