Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

strongSwan 5 may allow unauthorized network access

published 4 days ago
Summary

The strongSwan 5 software package from cleanstart can be tricked into exposing network connections to attackers. This could let an unauthorized user view or interfere with data flowing through the VPN. Install the latest updates or apply the vendor's patch as soon as possible to close the gap.

What to do
  • Update cleanstart strongswan to version 5.6.3-r0.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart strongswan < 5.6.3-r0
Fix: upgrade to 5.6.3-r0
Original advisory text
strongSwan 5
Security vulnerability affects the strongswan package. strongSwan 5.
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
Track software like this
Free during beta