Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggling when deployed behind a reverse proxy
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 HIGH severity CVE-2025-3110 (CVSS 7.5) OpenVPN Access Server 2.7.2-3.1.0 vulnerable to HTTP request smuggling via bare line-feed sequences when behind reverse proxy. Remote exploitation, no auth required. #CVE #Vulnerability #PatchNow https://t.co/GAomLyxNeV
🚨*CVE* CVE-2025-3110 OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggling when d… https://www.cve.org/CVERecord?id=CVE-2025-3110 ----- Traducción: CVE-2025-3110 Ope… http://infoflow.cloud`
Post summary
The tweet announces CVE-2025-3110, detailing its request smuggling flaw in OpenVPN Access Server, but offers no exploit code, patch info, or evidence of active attacks.
CVE-2025-3110 OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggling when d… https://www.cve.org/CVERecord?id=CVE-2025-3110
Post summary
The passage announces CVE‑2025‑3110, describing its technical details and impact but provides no evidence of active exploitation or available PoC.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openvpn | openvpn_access_server | - | - | - |