CVE-2026-47895Disclosure

LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

Back to dashboard

0.5/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
6 mentions across 4 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 3 signals
Technical details provided in 5 signals
Disclosure: 2 classified signals
General: 2 classified signals
Peaked 2d ago at 2 mentions (2026-06-11); latest day: 2
6 total mentions across 4 days

Deep dive

Activity timeline6 mentions / 4d

Signal classification3 categories

Disclosure

233.3%

Patch

233.3%

General

233.3%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-10	1	Disclosure1
2026-06-11	2	Disclosure1Patch1
2026-06-13	1	General1
2026-08-23	2	General1Patch1

Full discourse6 posts

yousukezan@yousukezan136d
Disclosure
広く利用されているVPNソフトウェアstrongSwanで、リモートコード実行につながる可能性のある脆弱性CVE-2026-47895が公表された。問題はlibstrongswanコンポーネントに存在し、特定条件下でメモリ破損を引き起こす。影響を受けるのは4.3.3以降のバージョンである。 strongSwanのアドバイザリによると、この脆弱性は特定の識別子（identity）の複製処理に起因する。libstrongswanのclone()メソッドが、エンコードデータを持たない空の識別子を正しく処理できず、同じメモリ領域を複数のオブジェクトが参照する状態になる。その結果、オブジェクト破棄時に二重解放（double-free）が発生する可能性がある。記事によると、この問題は空の識別子と特定の16進数プレフィックスを含むケースで発生する。EAPおよびEAP-Identity認証処理では影響を受けるコンストラクターが使用されており、認証失敗後にIKEセキュリティアソシエーションが破棄される過程でクラッシュが発生する可能性があるという。一方で、ゼロ長メモリ割り当て時にNULLを返すmalloc実装を使用する環境や、EAPまたはXAuth認証を利用していない環境は影響を受けない。また、EAP認証をRADIUSサーバーへ委任する構成も一般的には安全とされている。 strongSwanチームは修正版としてバージョン6.0.7を公開しており、既存バージョン向けのパッチも提供している。 https://securityonline.info/strongswan-cve-2026-47895/
Post summary
CVE-2026-47895 in strongSwan’s libstrongswan component was publicly disclosed, detailing a double‑free condition that could lead to RCE; a patch was released in version 6.0.7 and for older releases.
001651.5K
14.6K followersView on X
kokumօtօ@__kokumoto136d
Patch
VPNクライアントstrongSwanに重大(Critical)な脆弱性。CVE-2026-47895はCVSSスコア9.8の解放後メモリ使用。バージョン4.3.3以降に影響。6.0.7で修正。 https://securityonline.info/strongswan-cve-2026-47895/
Post summary
The text reports a critical strongSwan client vulnerability (CVE‑2026‑47895) with a CVSS 9.8 score, specifies the affected versions, and notes that a patch is available in release 6.0.7.
03080797
7.6K followersView on X
Ferramentas Linux@Cezar_H_Linux134d
General
⚠️ Se você usa strongSwan no #openSUSE, atenção: CVE-2026-47895 pode causar execução remota de código. Saiba mais: -> http://tinyurl.com/4t79e9ep https://t.co/vOIhN983DH
Post summary
The tweet warns strongSwan users on openSUSE about CVE-2026-47895 causing remote code execution, but does not provide PoC, exploit details, patch information, or evidence of active exploitation.
1001088
1.5K followersView on X
Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters63d
Patch
CVE-2026-47895 - Double-Free vulnerability in strongSwan EAP identity parsing. CVSS 7.5. Update to version 6.0.7 immediately. #CVE #strongSwan #infosec https://www.valtersit.com/cve/CVE-2026-47895 #CVE #CVEAlert #infosec #SysAdmin #cybersecurity #Linux #devsecops #devops #developer #sysadmin #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #ethicalhacking #cybersecurityawareness #cybersecurity #cybersecuritynews #cybersecuritytips #python #hacker #linux #kali #ubuntu #debian #ukraine #spain #ireland #unitedkingdom #canada #finland #estonia #lithuania #ireland #hungary #denmark #norway #malta #mexico #switczerland #iceland #israel
Post summary
Announcement of CVE-2026-47895 outlines a double‑free flaw in strongSwan EAP parsing, provides the CVSS score, and urges users to upgrade to version 6.0.7 for remediation.
0000042
1.0K followersView on X
VulDB 🛡@vuldb63d
General
A new vulnerability with increased severity was disclosed for strongSwan (CVE-2026-47895) https://vuldb.com/vuln/394517
Post summary
The post reports the disclosure of a new vulnerability (CVE‑2026‑47895) in strongSwan with increased severity, but offers no technical, exploit, or remediation details.
00000125
2.3K followersView on X
Autumn Good@autumn_good_35137d
Disclosure
『A vulnerability in libstrongswan related to the cloning of certain identities was discovered in strongSwan that can result in a double-free and potentially remote code execution.』 strongSwan Vulnerability (CVE-2026-47895) https://www.strongswan.org//blog/2026/06/08/strongswan-vulnerability-(cve-2026-47895).html
Post summary
A new CVE-2026‑47895 in libstrongswan has been disclosed, describing a double‑free that could lead to remote code execution. No PoC, exploit, or patch is mentioned.
00000365
6.9K followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-47895

yousukezan[verified]@yousukezanDisclosure

CVE-2026-47895 in strongSwan’s libstrongswan component was publicly disclosed, detailing a double‑free condition that could lead to RCE; a patch was released in version 6.0.7 and for older releases.

kokumօtօ[verified]@__kokumotoPatch

The text reports a critical strongSwan client vulnerability (CVE‑2026‑47895) with a CVSS 9.8 score, specifies the affected versions, and notes that a patch is available in release 6.0.7.

Hugo | DevOps | Cybersecurity 🇱🇻[verified]@HugoValtersPatch

Announcement of CVE-2026-47895 outlines a double‑free flaw in strongSwan EAP parsing, provides the CVSS score, and urges users to upgrade to version 6.0.7 for remediation.

Ferramentas Linux@Cezar_H_LinuxGeneral

The tweet warns strongSwan users on openSUSE about CVE-2026-47895 causing remote code execution, but does not provide PoC, exploit details, patch information, or evidence of active exploitation.

VulDB 🛡@vuldbGeneral

The post reports the disclosure of a new vulnerability (CVE‑2026‑47895) in strongSwan with increased severity, but offers no technical, exploit, or remediation details.

Autumn Good@autumn_good_35Disclosure

A new CVE-2026‑47895 in libstrongswan has been disclosed, describing a double‑free that could lead to remote code execution. No PoC, exploit, or patch is mentioned.