Approved changes feed: RSS · Atom

cpe:2.3:a:openvpn:openvpn:2.6.13:*:*:*:community:*:*:*

part: a version: 2.6.13 update: *

VendorOpenvpn (69250643-f594-58ab-9395-086994cbe5f3)
ProductOpenvpn (cff78dd9-2909-5405-93d7-f62ace8a52df)
Edition*
Language*
Software editioncommunity
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/openvpn purl2cpe 2026-06-01 10:12:11.053248
pkg:deb/ubuntu/openvpn purl2cpe 2026-06-01 10:12:11.053249
pkg:github/openvpn/openvpn purl2cpe 2026-06-01 10:12:11.053250

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-12106 vulnerable 2026-06-03 14:58:43.806831 Details available
Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses
Published: 2025-12-01T12:43:02.480Z
Updated: 2025-12-01T18:50:28.995Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.