High severity7.1NVD Advisory· Published Sep 11, 2026

CVE-2026-78134

Description

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity.

Affected products

Strongswan/Strongswanreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 4.5.0 - 6.0.7

Patches

Vulnerability mechanics

References

github.com/strongswan/strongswan/releases/tag/6.1.0nvd
www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78134).htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000