Medium severity5.6NVD Advisory· Published Sep 11, 2026· Updated Sep 16, 2026
CVE-2026-78135
CVE-2026-78135
Description
libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CHILD_SA requests are mishandled, there can be an authentication bypass.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4(expand)+ 2 more
- (no CPE)
- cpe:2.3:a:strongswan:strongswan:*:*:*:*:*:*:*:*range: >=5.9.7,<=6.0.7
- (no CPE)range: 5.9.7 - 6.0.7
Patches
Vulnerability mechanics
References
2- github.com/strongswan/strongswan/releases/tag/6.1.0nvdRelease NotesVendor Advisory
- www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78135).htmlnvdVendor AdvisoryMitigation
News mentions
0No linked articles in our index yet.