← All advisories

High severity7.5NVD Advisory· Published Sep 11, 2026· Updated Sep 15, 2026

CVE-2026-78130

CVE-2026-78130

Description

strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Strongswan/Strongswanreferences3 versions
(expand)+ 2 more
- (no CPE)
- cpe:2.3:a:strongswan:strongswan:*:*:*:*:*:*:*:*range: >=4.2.0,<6.1.0
- (no CPE)range: 4.2.0 - 6.0.7
osv-coords
pkg:rpm/opensuse/strongswan&distro=openSUSE%20Tumbleweed
Range: < 6.1.0-1.1

Patches

Vulnerability mechanics

References

2

github.com/strongswan/strongswan/releases/tag/6.1.0nvdPatchRelease NotesVendor Advisory
www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78130).htmlnvdMitigationVendor Advisory

News mentions

0

No linked articles in our index yet.