Approved changes feed: RSS · Atom

cpe:2.3:a:softether:softethervpn:*:*:*:*:developer:*:*:*

part: a version: * update: *

VendorSoftether (24228175-3979-597c-a898-6e1ac567e51a)
ProductSoftethervpn (551e212b-dcf7-5502-a83a-74ddbc73689c)
Edition*
Language*
Software editiondeveloper
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/softethervpn/softethervpn purl2cpe 2026-06-01 10:14:36.357458

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-39312 vulnerable 2026-06-08 08:01:16.162295 Pre-Auth EAP-TLS DoS on SoftEther VPN Developer Edition
HIGH (7.5)
SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Program. In 5.2.5188 and earlier, a pre-authentication denial-of-service vulnerability exists in SoftEther VPN Developer Edition 5.2.5188 (and likely earlier versions of Developer Edition). An unauthenticated remote attacker can crash the vpnserver process by sending a single malformed EAP-TLS packet over raw L2TP (UDP/1701), terminating all active VPN sessions.
Published: 2026-04-07T16:52:08.172Z
Updated: 2026-04-07T17:27:16.498Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.