Exploit discussion active in current signal (6 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
openvpn-auth-oauth2 is a plugin/management interface client for OpenVPN server to handle an OIDC based single sign-on (SSO) auth flows. From version 1.26.3 to before version 1.27.3, when openvpn-auth-oauth2 is deployed in the experimental plugin mode (shared library loaded by OpenVPN via the plugin directive), clients that do not support WebAuth/SSO (e.g., the openvpn CLI on Linux) are incorrectly admitted to the VPN despite being denied by the authentication logic. The default management-interface mode is not affected because it does not use the OpenVPN plugin return-code mechanism. This issue has been patched in version 1.27.3.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
RISING
| Date | Total | Labels |
|---|
| 2026-04-23 | 1 | Disclosure1 |
| 2026-05-08 | 2 | Disclosure2 |
| 2026-05-09 | 1 | Disclosure1 |
| 2026-05-10 | 1 | Disclosure1 |
| 2026-05-12 | 6 | Disclosure3General3 |
--- Validated by the Lyrie Threat Intelligence Pipeline — 3 independent sources confirmed before publication. No speculation. CVE: CVE-2026-41070 CVSS: 10 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Severity: CRITICAL Status: Critical advisory
Post summary
The advisory announces a critical vulnerability (CVE-2026-41070) with a 10 CVSS score, but no proof‑of‑concept, exploit, or patch information is provided.
References CVE: CVE-2026-41070 CVSS: 10 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Severity: CRITICAL Status: Critical advisory
Post summary
The text announces CVE-2026-41070 as a critical vulnerability with CVSS 10 but lacks information on exploitation evidence, PoC, or remediation.
CVE: CVE-2026-41070 CVSS: 10 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Severity: CRITICAL Status: Critical advisory openvpn-auth-oauth2 is a plugin/management interface client for OpenVPN server to handle an OIDC based single sign-on (SSO) auth flows.
Post summary
The post announces CVE-2026-41070 with a CVSS score of 10 (critical), but provides no PoC, exploit, patch, or active exploitation details.
CRITICAL: CVE-2026-41070 (CVSS 10) — multiple products. CVE: CVE-2026-41070 CVSS: 10 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Severity: CRITICAL Status: Critical advisory
Post summary
The advisory announces CVE-2026-41070 as a critical vulnerability with a CVSS score of 10, but does not provide any exploitation details or remediation guidance.
https://lyrie.ai/research/research/cve-2026-41070-advisory #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The text briefly references a CVE via a URL and hashtags but does not provide concrete details, links to proof of concept, exploit code, or evidence of active exploitation.
CVE-2026-41070: OpenVPN Plugin Flaw Allows Unauthenticated Access https://thecybrdef.com/cve-2026-41070-openvpn-plugin-unauthenticated-access/ #OpenVpnPlugins #Cybersecurityplugins #Cybersecurity
Post summary
The brief announcement highlights CVE‑2026‑41070, a plugin flaw in OpenVPN that permits unauthenticated access, and directs readers to an external link for further details.
CVE-2026-41070: OpenVPN Plugin Flaw Allows Unauthenticated Access https://thecybrdef.com/cve-2026-41070-openvpn-plugin-unauthenticated-access/ #OpenVpnPlugins #Cybersecurityplugins #Cybersecurity
Post summary
The post announces CVE‑2026‑41070, an unauthenticated access flaw in OpenVPN plugins, and links to a write‑up, but it provides no concrete exploit details, mitigation, or evidence of active exploitation.
CVE-2026-41070: OpenVPN Plugin Flaw Allows Unauthenticated Access https://thecybrdef.com/cve-2026-41070-openvpn-plugin-unauthenticated-access/ #OpenVpnPlugins #Cybersecurityplugins #Cybersecurity https://t.co/rSSj3Tnfcg
Post summary
The tweet announces CVE‑2026‑41070, noting a flaw in OpenVPN plugins that permits unauthenticated access and links to an article for details.
CVE-2026-41070 Authentication Bypass in openvpn-auth-oauth2 Plugin Mode Versions 1.26.3-1.27.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41070
Post summary
The post announces CVE-2026-41070, an authentication bypass in openvpn‑auth‑oauth2 plugin mode for versions 1.26.3‑1.27.2, without providing PoC, exploit code, active exploitation, or patch information.
CVE-2026-41070 openvpn-auth-oauth2 is a plugin/management interface client for OpenVPN server to handle an OIDC based single sign-on (SSO) auth flows. From version 1.26.3 to before … https://www.cve.org/CVERecord?id=CVE-2026-41070
Post summary
The message references CVE-2026-41070 as an OpenVPN OIDC SSO plugin issue, providing no details on exploitation, patches, or severity.
The `openvpn-auth-oauth2` module is affected by `CVE-2026-41070`, allowing unauthenticated VPN access due to incorrect client-deny handling. Review configurations and monitor for updates. #OpenVPN #OAuth2 #infosec https://www.pulsepatch.io/posts/cve-2026-41070-openvpn-auth-oauth2-unauthenticated-access
Post summary
A vulnerability (CVE-2026-41070) in openvpn-auth-oauth2 that permits unauthenticated VPN access is disclosed, with no PoC, exploit, or patch mentioned.