Approved changes feed: RSS · Atom

cpe:2.3:a:openvpn:openvpn:2.6.0:-:*:*:community:*:*:*

part: a version: 2.6.0 update: -

VendorOpenvpn (69250643-f594-58ab-9395-086994cbe5f3)
ProductOpenvpn (cff78dd9-2909-5405-93d7-f62ace8a52df)
Edition*
Language*
Software editioncommunity
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/openvpn purl2cpe 2026-06-01 10:12:11.053223
pkg:deb/ubuntu/openvpn purl2cpe 2026-06-01 10:12:11.053224
pkg:github/openvpn/openvpn purl2cpe 2026-06-01 10:12:11.053226

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-24974 vulnerable 2026-06-03 14:55:06.183447 Details available
The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVPN interactive service.
Published: 2024-07-08T10:20:34.520Z
Updated: 2024-08-10T03:55:21.896Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.