CVE-2026-88964

LOWCVSS 7.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disclosure via crafted domain search options

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://community.openvpn.net/Security%20Announcements/CVE-2026-88964

Weakness type (CWE)

CWE-125CWE-191

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Full discourse1 post

CCB Alert@CCBalert1d
Warning: High severity vulnerabilities in #OpenVPN. CVE-2026-88964, CVE-2026-84790. These flaws allow attacks via an integer underflow in the domain search list and certificate subject impersonation using NULL bytes. #Patch #Patch #Patch
00002201
7.3K followersView on X

Explore more

Back to dashboard